Oval Definition:	oval:org.mitre.oval:def:11417
Revision Date: 2013-04-29 Version: 12 Title: stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. Description: stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-4273 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section systemtap-initscript is earlier than 0:0.9.7-5.el5_4.3 OR systemtap-runtime is earlier than 0:0.9.7-5.el5_4.3 OR systemtap-testsuite is earlier than 0:0.9.7-5.el5_4.3 OR systemtap-client is earlier than 0:0.9.7-5.el5_4.3 OR systemtap-sdt-devel is earlier than 0:0.9.7-5.el5_4.3 OR systemtap is earlier than 0:0.9.7-5.el5_4.3 OR systemtap-server is earlier than 0:0.9.7-5.el5_4.3
BACK