Security Advisory

CVE-2010-4170

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-12-07 21:00:00

Last updated 2024-08-07 03:34:37

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

← Browse all CVEs View on cve.org ↗