CVE-2009-0784: Race Condition
First published: Wed Mar 25 2009(Updated: )
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Systemtap-sdt-devel | =0.0.20090314 | |
| Red Hat Systemtap-sdt-devel | =0.0.20080705 | |
| Debian Linux | =5.0 | |
| Debian Linux | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2009/dsa-1755
- http://secunia.com/advisories/34441
- http://www.redhat.com/support/errata/RHSA-2009-0373.html
- http://secunia.com/advisories/34479
- http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm
- http://secunia.com/advisories/34548
- http://www.vupen.com/english/advisories/2009/0907
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613
Frequently Asked Questions
What is the severity of CVE-2009-0784?
CVE-2009-0784 is considered a critical vulnerability due to its ability to allow local users to gain elevated privileges.
How do I fix CVE-2009-0784?
To fix CVE-2009-0784, update SystemTap to a version later than 0.0.20090314 or 0.0.20080705.
Who is affected by CVE-2009-0784?
CVE-2009-0784 affects local users in the stapusr group on systems running vulnerable versions of SystemTap.
What can attackers do with CVE-2009-0784?
Attackers can exploit CVE-2009-0784 to insert arbitrary SystemTap kernel modules and gain elevated privileges.
What versions of SystemTap are vulnerable to CVE-2009-0784?
Versions 0.0.20080705 and 0.0.20090314 of SystemTap are identified as vulnerable in CVE-2009-0784.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/systemtap
- canonical/red hat systemtap-sdt-devel
- version/red hat systemtap-sdt-devel/0.0.20090314
- version/red hat systemtap-sdt-devel/0.0.20080705
- vendor/debian
- canonical/debian linux
- version/debian linux/5.0
- version/debian linux/4.0