CVE-2011-2502
SystemTap < 1.6 - Privilege Escalation via Crafted Module in User-Space Probing Path
Title source: llmDescription
runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.
References (4)
Core 4
Core References
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=716476
Various Sources x_refsource_confirm
http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=4ecaadf545a729bb3e5f01f6f019716d49815d9a
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/45377
Various Sources x_refsource_confirm
http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8
Scores
EPSS
0.0052
EPSS Percentile
40.5%
Details
CWE
CWE-20
Status
published
Products (30)
systemtap/systemtap
0.2.2
systemtap/systemtap
0.3
systemtap/systemtap
0.4
systemtap/systemtap
0.5
systemtap/systemtap
0.5.3
systemtap/systemtap
0.5.4
systemtap/systemtap
0.5.5
systemtap/systemtap
0.5.7
systemtap/systemtap
0.5.8
systemtap/systemtap
0.5.9
... and 20 more
Published
Jul 26, 2012
Tracked Since
Feb 18, 2026