Back to Database
Status published
High
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value...
Vulnerability Description
stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0412
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56611
- http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html
- http://www.securityfocus.com/bid/38316
More from systemtap
View All →CVE-2012-0875
SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode...
Medium
5.4
CVE-2011-2503
The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool...
Low
3.7
CVE-2011-2502
runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before...
Medium
4.4
CVE-2011-1781
SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows...
Low
1.2
CVE-2011-1769
SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is...
Low
1.2
Affected Vendor
systemtap
View all reports →Affected Software
systemtap
Vulnerable Versions:
1.1
Timeline
Official Publish:
February 25th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.