CVE-2009-4273 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	10 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:C/I:C/A:C
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 95%

Vendor	Product	Version
systemtap	systemtap	𝑥 ≤ 1.0
systemtap	systemtap	0.2.2
systemtap	systemtap	0.3
systemtap	systemtap	0.4
systemtap	systemtap	0.5
systemtap	systemtap	0.5.3
systemtap	systemtap	0.5.4
systemtap	systemtap	0.5.5
systemtap	systemtap	0.5.7
systemtap	systemtap	0.5.8
systemtap	systemtap	0.5.9
systemtap	systemtap	0.5.10
systemtap	systemtap	0.5.12
systemtap	systemtap	0.5.13
systemtap	systemtap	0.5.14
systemtap	systemtap	0.6
systemtap	systemtap	0.6.2
systemtap	systemtap	0.7
systemtap	systemtap	0.7.2
systemtap	systemtap	0.8
systemtap	systemtap	0.9
systemtap	systemtap	0.9.5
systemtap	systemtap	0.9.7
systemtap	systemtap	0.9.8
systemtap	systemtap	0.9.9

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

systemtap

bullseye	4.4-2 fixed
lenny	not-affected
etch	not-affected
bookworm	4.8-2 fixed
sid	5.1-4 fixed
trixie	5.1-4 fixed

Ubuntu Releases

Ubuntu Product

Codename

systemtap

raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	ignored
natty	ignored
maverick	ignored
lucid	ignored
karmic	ignored
jaunty	ignored
intrepid	ignored
hardy	ignored
dapper	dne

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034041.html

http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

http://secunia.com/advisories/38154

http://secunia.com/advisories/38216

http://secunia.com/advisories/38765

http://secunia.com/advisories/39656

http://sourceware.org/bugzilla/show_bug.cgi?id=11105

http://sourceware.org/ml/systemtap/2010-q1/msg00142.html

http://sourceware.org/systemtap/ftp/releases/systemtap-1.1.tar.gz

http://www.redhat.com/support/errata/RHSA-2010-0124.html

http://www.vupen.com/english/advisories/2010/0169

http://www.vupen.com/english/advisories/2010/1001

https://bugzilla.redhat.com/show_bug.cgi?id=550172

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11417

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034041.html

http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

http://secunia.com/advisories/38154

http://secunia.com/advisories/38216

http://secunia.com/advisories/38765

http://secunia.com/advisories/39656

http://sourceware.org/bugzilla/show_bug.cgi?id=11105

http://sourceware.org/ml/systemtap/2010-q1/msg00142.html

http://sourceware.org/systemtap/ftp/releases/systemtap-1.1.tar.gz

http://www.redhat.com/support/errata/RHSA-2010-0124.html

http://www.vupen.com/english/advisories/2010/0169

http://www.vupen.com/english/advisories/2010/1001

https://bugzilla.redhat.com/show_bug.cgi?id=550172

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11417