Oval Definition:oval:org.mitre.oval:def:23350
Revision Date:2014-05-26Version:13
Title:ELSA-2011:1089: systemtap security update (Moderate)
Description:The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2011-2503
ELSA-2011:1089-01
Platform(s):Oracle Linux 5
Product(s):systemtap
Definition Synopsis
  • Oracle Linux 5.x
  • AND rpm test
  • systemtap-testsuite is earlier than 0:1.3-9.el5
  • OR systemtap-runtime is earlier than 0:1.3-9.el5
  • OR systemtap is earlier than 0:1.3-9.el5
  • OR systemtap-sdt-devel is earlier than 0:1.3-9.el5
  • OR systemtap-client is earlier than 0:1.3-9.el5
  • OR systemtap-initscript is earlier than 0:1.3-9.el5
  • OR systemtap-server is earlier than 0:1.3-9.el5
  • BACK