Back to CVE Browser

CVE-2010-0412

HIGH

7.5

CVSS Severity Score

EPSS Score0.1870%

EPSS Percentile20.54th

PublishedFeb 25, 2010

Last ModifiedApr 29, 2026

Vulnerability Description

stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.

Affected Platforms (CPE)

📦

Systemtap

Systemtap

= 1.1

References & Advisories

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

🔗 http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

🔗 http://www.securityfocus.com/bid/38316

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/56611

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

🔗 http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html

Related Vulnerabilities

CVE-2009-427310.0

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command...

CVE-2010-41707.2

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local us...

CVE-2009-07846.3

Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrar...

CVE-2012-08755.4

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive infor...