Oval Definition:oval:org.mitre.oval:def:22019
Revision Date:2014-02-24Version:10
Title:RHSA-2011:1089: systemtap security update (Moderate)
Description:The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CESA-2011:1089
CVE-2011-2503
RHSA-2011:1089-01
Platform(s):CentOS Linux 5
Red Hat Enterprise Linux 5
Product(s):systemtap
Definition Synopsis
  • Redhat 5 or Centos 5 release
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • AND Packages section
  • systemtap-testsuite is earlier than 0:1.3-9.el5
  • OR systemtap-runtime is earlier than 0:1.3-9.el5
  • OR systemtap is earlier than 0:1.3-9.el5
  • OR systemtap-sdt-devel is earlier than 0:1.3-9.el5
  • OR systemtap-client is earlier than 0:1.3-9.el5
  • OR systemtap-initscript is earlier than 0:1.3-9.el5
  • OR systemtap-server is earlier than 0:1.3-9.el5
  • BACK