CVE-2010-4170

HIGH

7.2

CVSS Severity Score

EPSS Score0.1210%

EPSS Percentile5.04th

Published2010年12月7日

Last Modified2026年4月29日

Vulnerability Description

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Affected Platforms (CPE)

📦

Systemtap

= 1.3

References & Advisories

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html

🔗 http://packetstormsecurity.com/files/152569/SystemTap-1.3-MODPROBE_OPTIONS-Privilege-Escalation.html

🔗 http://secunia.com/advisories/42256

🔗 http://secunia.com/advisories/42263

🔗 http://secunia.com/advisories/42306

🔗 http://secunia.com/advisories/42318

Vulnerability Description

Affected Platforms (CPE)

Systemtap

References & Advisories

相關漏洞威脅