CVE-2009-4273 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	10 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 95%

Affected Products (NVD)

Vendor	Product	Version
systemtap	systemtap	𝑥 ≤ 1.0
systemtap	systemtap	0.2.2
systemtap	systemtap	0.3
systemtap	systemtap	0.4
systemtap	systemtap	0.5
systemtap	systemtap	0.5.3
systemtap	systemtap	0.5.4
systemtap	systemtap	0.5.5
systemtap	systemtap	0.5.7
systemtap	systemtap	0.5.8
systemtap	systemtap	0.5.9
systemtap	systemtap	0.5.10
systemtap	systemtap	0.5.12
systemtap	systemtap	0.5.13
systemtap	systemtap	0.5.14
systemtap	systemtap	0.6
systemtap	systemtap	0.6.2
systemtap	systemtap	0.7
systemtap	systemtap	0.7.2
systemtap	systemtap	0.8
systemtap	systemtap	0.9
systemtap	systemtap	0.9.5
systemtap	systemtap	0.9.7
systemtap	systemtap	0.9.8
systemtap	systemtap	0.9.9

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

systemtap

bookworm	4.8-2 fixed
bullseye	4.4-2 fixed
etch	not-affected
lenny	not-affected
sid	5.1-4 fixed
trixie	5.1-4 fixed

Ubuntu Releases

Ubuntu Product

Codename

systemtap

dapper	dne
hardy	ignored
intrepid	ignored
jaunty	ignored
karmic	ignored
lucid	ignored
maverick	ignored
natty	ignored
oneiric	ignored
precise	not-affected
quantal	not-affected
raring	not-affected

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034041.html

http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

http://secunia.com/advisories/38154

http://secunia.com/advisories/38216

http://secunia.com/advisories/38765

http://secunia.com/advisories/39656

http://sourceware.org/bugzilla/show_bug.cgi?id=11105

http://sourceware.org/ml/systemtap/2010-q1/msg00142.html

http://sourceware.org/systemtap/ftp/releases/systemtap-1.1.tar.gz

http://www.redhat.com/support/errata/RHSA-2010-0124.html

http://www.vupen.com/english/advisories/2010/0169

http://www.vupen.com/english/advisories/2010/1001

https://bugzilla.redhat.com/show_bug.cgi?id=550172

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11417

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034041.html

http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

http://secunia.com/advisories/38154

http://secunia.com/advisories/38216

http://secunia.com/advisories/38765

http://secunia.com/advisories/39656

http://sourceware.org/bugzilla/show_bug.cgi?id=11105

http://sourceware.org/ml/systemtap/2010-q1/msg00142.html

http://sourceware.org/systemtap/ftp/releases/systemtap-1.1.tar.gz

http://www.redhat.com/support/errata/RHSA-2010-0124.html

http://www.vupen.com/english/advisories/2010/0169

http://www.vupen.com/english/advisories/2010/1001

https://bugzilla.redhat.com/show_bug.cgi?id=550172

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11417