CVE-2011-2502 in systemtapinfo

Summary

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

06/15/2011

Disclosure

07/26/2012

CPE

ready

CVSS

5.9

EPSS

0.00076

Activities

Very Low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!