CVE-2010-0412: OS Command Injection
stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0412?
CVE-2010-0412 is classified as a medium severity vulnerability due to its potential impact on the execution of unauthorized commands.
How do I fix CVE-2010-0412?
To fix CVE-2010-0412, upgrade SystemTap to version 1.2 or later where this issue has been addressed.
What is affected by CVE-2010-0412?
CVE-2010-0412 affects SystemTap version 1.1, where the -B option does not adequately restrict input values.
What impact does CVE-2010-0412 have on system security?
CVE-2010-0412 can allow attackers to exploit the make program, which could lead to unauthorized code execution.
Are there any workarounds for CVE-2010-0412?
A workaround for CVE-2010-0412 is to avoid using the -B option with the stap-server until an upgrade can be performed.