CVE

Id
50415  
CVE No.
CVE-2011-2503  
Status
Candidate  
Description
The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544961 50415 CVE-2011-2503 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503  View
544962 50415 CVE-2011-2503 CONFIRM:http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=blob;f=NEWS;hb=304d73b1fea24af791f2a129fb141c5009eae6a8  View
544963 50415 CVE-2011-2503 CONFIRM:http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commitdiff;h=ed51cfa24ca27746ab09b59280b94117dd58cba3  View
544964 50415 CVE-2011-2503 DEBIAN:DSA-2348  View
544965 50415 CVE-2011-2503 URL:http://www.debian.org/security/2011/dsa-2348  View
544966 50415 CVE-2011-2503 SECUNIA:45377  View
544967 50415 CVE-2011-2503 URL:http://secunia.com/advisories/45377  View
544968 50415 CVE-2011-2503 SECUNIA:46920  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34482 JVNDB-2011-004724 phpMyAdmin の libraries/display_tbl.lib.php におけるディレクトリトラバーサルの脆弱性 phpMyAdmin の libraries/display_tbl.lib.php には、特定の MIME 変換機能が有効な際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-2508 50415 6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004724.html  View