CVE-2009-0784

Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:systemtap:systemtap:0.0.20080705:*:*:*:*:*:*:*
cpe:2.3:a:systemtap:systemtap:0.0.20090314:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:00

Type Values Removed Values Added
References () http://secunia.com/advisories/34441 - Third Party Advisory () http://secunia.com/advisories/34441 - Third Party Advisory
References () http://secunia.com/advisories/34479 - Third Party Advisory () http://secunia.com/advisories/34479 - Third Party Advisory
References () http://secunia.com/advisories/34548 - Third Party Advisory () http://secunia.com/advisories/34548 - Third Party Advisory
References () http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm - Third Party Advisory () http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm - Third Party Advisory
References () http://www.debian.org/security/2009/dsa-1755 - Patch, Third Party Advisory () http://www.debian.org/security/2009/dsa-1755 - Patch, Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2009-0373.html - Third Party Advisory () http://www.redhat.com/support/errata/RHSA-2009-0373.html - Third Party Advisory
References () http://www.vupen.com/english/advisories/2009/0907 - Third Party Advisory () http://www.vupen.com/english/advisories/2009/0907 - Third Party Advisory
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613 - Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613 - Third Party Advisory

Information

Published : 2009-03-25 23:30

Updated : 2024-11-21 01:00


NVD link : CVE-2009-0784

Mitre link : CVE-2009-0784

CVE.ORG link : CVE-2009-0784


JSON object : View

Products Affected

debian

  • debian_linux

systemtap

  • systemtap
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')