Red Hat Security AdvisoryRHSA-2009:0373
systemtap security update
Released 2009-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) systemtap-0.7.2-3.el5_3, systemtap-0.7.2-3.el5_3.i386, systemtap-0.7.2-3.el5_3.ia64 +12
- Red Hat Enterprise Linux AS version 4 systemtap-0.6.2-2.el4_7, systemtap-0.6.2-2.el4_7.i386, systemtap-0.6.2-2.el4_7.ia64 +6
- Red Hat Enterprise Linux Desktop (v. 5 client) systemtap-0.7.2-3.el5_3, systemtap-0.7.2-3.el5_3.i386, systemtap-client-0.7.2-3.el5_3 +7
- Red Hat Enterprise Linux Desktop version 4 systemtap-0.6.2-2.el4_7, systemtap-0.6.2-2.el4_7.i386, systemtap-runtime-0.6.2-2.el4_7 +3
- Red Hat Enterprise Linux ES version 4 systemtap-0.6.2-2.el4_7, systemtap-0.6.2-2.el4_7.i386, systemtap-0.6.2-2.el4_7.ia64 +6
- Red Hat Enterprise Linux WS version 4 systemtap-0.6.2-2.el4_7, systemtap-0.6.2-2.el4_7.i386, systemtap-0.6.2-2.el4_7.ia64 +6
Fixes 1 record
Priority LOW 28
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
CVSS 2.0MEDIUM 6.3· Local · No auth · Interaction — · EPSS 0.00257 · Published 2009-03-25 · Fixed CWE-362
