National Cyber Awareness System

Vulnerability Summary for CVE-2010-4170

Overview

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2

Type: Patch Information

Hyperlink:http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2

External Source: XF

Name: systemtap-staprun-priv-escalation(63344)

Hyperlink:http://xforce.iss.net/xforce/xfdb/63344

External Source: SECTRACK

Name: 1024754

Hyperlink:http://www.securitytracker.com/id?1024754

External Source: BID

Name: 44914

Hyperlink:http://www.securityfocus.com/bid/44914

External Source: REDHAT

Name: RHSA-2010:0895

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0895.html

External Source: REDHAT

Name: RHSA-2010:0894

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0894.html

External Source: EXPLOIT-DB

Name: 15620

Hyperlink:http://www.exploit-db.com/exploits/15620

External Source: DEBIAN

Name: DSA-2348

Hyperlink:http://www.debian.org/security/2011/dsa-2348

External Source: MLIST

Name: [systemtap] 20101117 important systemtap security fix

Hyperlink:http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html

External Source: SECUNIA

Name: 46920

Hyperlink:http://secunia.com/advisories/46920

External Source: SECUNIA

Name: 42318

Type: Advisory

Hyperlink:http://secunia.com/advisories/42318

External Source: SECUNIA

Name: 42306

Type: Advisory

Hyperlink:http://secunia.com/advisories/42306

External Source: SECUNIA

Name: 42263

Type: Advisory

Hyperlink:http://secunia.com/advisories/42263

External Source: SECUNIA

Name: 42256

Type: Advisory

Hyperlink:http://secunia.com/advisories/42256

External Source: FEDORA

Name: FEDORA-2010-17873

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html

External Source: FEDORA

Name: FEDORA-2010-17868

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html

External Source: FEDORA

Name: FEDORA-2010-17865

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html