Red Hat Security AdvisoryRHSA-2010:0124
systemtap security update
Released 2010-03-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) systemtap-0.9.7-5.el5_4.3, systemtap-0.9.7-5.el5_4.3.i386, systemtap-0.9.7-5.el5_4.3.ia64 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) systemtap-0.9.7-5.el5_4.3, systemtap-0.9.7-5.el5_4.3.i386, systemtap-client-0.9.7-5.el5_4.3 +11
Fixes 2 records
Priority MEDIUM 60
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1772 · Published 2010-01-26 · Fixed CWE-94
Priority LOW 24
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or ha…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00947 · Published 2010-02-08 · Fixed CWE-189
