CVE

Id
42996  
CVE No.
CVE-2010-0412  
Status
Candidate  
Description
stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468668 42996 CVE-2010-0412 MLIST:[scm-commits] 20100215 rpms/systemtap/devel systemtap-1.1-tighten-server-params.patch, NONE, 1.1 systemtap.spec, 1.59, 1.60  View
468669 42996 CVE-2010-0412 URL:http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html  View
468670 42996 CVE-2010-0412 FEDORA:FEDORA-2010-1373  View
468671 42996 CVE-2010-0412 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html  View
468672 42996 CVE-2010-0412 FEDORA:FEDORA-2010-1720  View
468673 42996 CVE-2010-0412 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html  View
468674 42996 CVE-2010-0412 BID:38316  View
468675 42996 CVE-2010-0412 URL:http://www.securityfocus.com/bid/38316  View
468676 42996 CVE-2010-0412 XF:systemtap-stapserver-unspecified(56611)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35333 JVNDB-2010-001113 RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性 RealNetworks HelixPlayer および RealPlayer の common/util/hxurl.cpp および player/hxclientkit/src/CHXClientSink.cpp の Unescape 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0416 42996 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001113.html  View