CVE-2010-4170
07.12.2010, 22:00
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| systemtap | systemtap | 1.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| systemtap |
| ||
| systemtap-client |
| ||
| systemtap-grapher |
| ||
| systemtap-initscript |
| ||
| systemtap-runtime |
| ||
| systemtap-sdt-devel |
| ||
| systemtap-server |
| ||
| systemtap-testsuite |
|
Common Weakness Enumeration