RHSA-2010:0125: Moderate: systemtap security update
SystemTap is an instrumentation system for systems running the Linuxkernel, version 2.6. Developers can write scripts to collect data on theoperation of the system.A buffer overflow flaw was found in SystemTap's tapset getargv()function. If a privileged user ran a SystemTap script that called thisfunction, a local, unprivileged user could, while that script is stillrunning, trigger this flaw and cause memory corruption by running a commandwith a large argument list, which may lead to a system crash or,potentially, arbitrary code execution with root privileges. (CVE-2010-0411)Note: SystemTap scripts that call getargv(), being a privilegedfunction, can only be executed by the root user or users in the stapdevgroup. As well, if such a script was compiled and installed by root, usersin the stapusr group would also be able to execute it.SystemTap users should upgrade to these updated packages, which contain abackported patch to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0125?
The severity of RHSA-2010:0125 is classified as moderate.
How do I fix RHSA-2010:0125?
To fix RHSA-2010:0125, update the systemtap packages to version 0.6.2-2.el4_8.1 or later.
Who is affected by RHSA-2010:0125?
RHSA-2010:0125 affects privileged users running vulnerable versions of the systemtap package on Red Hat Enterprise Linux 4.
What type of vulnerability is RHSA-2010:0125?
RHSA-2010:0125 is a buffer overflow vulnerability found in SystemTap's tapset __get_argv() function.
Is RHSA-2010:0125 a local or remote vulnerability?
RHSA-2010:0125 is categorized as a local vulnerability, as it requires a privileged user to exploit.