Upstream information

CVE-2010-0412 at MITRE

Description

stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.

SUSE information

Overall state of this security issue: Ignore

This issue is currently rated as having important severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 7.5
Vector AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 574243 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Module for Development Tools 15
  • systemtap >= 3.2-5.64
  • systemtap-runtime >= 3.2-5.64
  • systemtap-sdt-devel >= 3.2-5.64
  • systemtap-server >= 3.2-5.64
Patchnames:
SUSE Linux Enterprise Module for Development Tools 15 GA systemtap
SUSE Linux Enterprise Server 12
  • systemtap >= 2.5-1.55
  • systemtap-runtime >= 2.5-1.55
  • systemtap-server >= 2.5-1.55
Patchnames:
SUSE Linux Enterprise Server 12 GA systemtap
SUSE Linux Enterprise Server 12 SP1
  • systemtap >= 2.5-4.44
  • systemtap-runtime >= 2.5-4.44
  • systemtap-server >= 2.5-4.44
Patchnames:
SUSE Linux Enterprise Server 12 SP1 GA systemtap
SUSE Linux Enterprise Server 12 SP2
  • systemtap >= 3.0-7.15
  • systemtap-runtime >= 3.0-7.15
  • systemtap-server >= 3.0-7.15
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA systemtap
SUSE Linux Enterprise Server 12 SP3
  • systemtap >= 3.0-10.15
  • systemtap-runtime >= 3.0-10.15
  • systemtap-server >= 3.0-10.15
Patchnames:
SUSE Linux Enterprise Server 12 SP3 GA systemtap
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
  • systemtap >= 3.0-7.15
  • systemtap-runtime >= 3.0-7.15
  • systemtap-server >= 3.0-7.15
Patchnames:
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 GA systemtap
SUSE Linux Enterprise Software Development Kit 12
  • systemtap-sdt-devel >= 2.5-1.55
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 GA systemtap-sdt-devel
SUSE Linux Enterprise Software Development Kit 12 SP1
  • systemtap-sdt-devel >= 2.5-4.44
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP1 GA systemtap-sdt-devel
SUSE Linux Enterprise Software Development Kit 12 SP2
  • systemtap-sdt-devel >= 3.0-7.15
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA systemtap-sdt-devel
SUSE Linux Enterprise Software Development Kit 12 SP3
  • systemtap-sdt-devel >= 3.0-10.15
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP3 GA systemtap-sdt-devel
openSUSE Tumbleweed
  • systemtap >= 3.0-1.6
  • systemtap-runtime >= 3.0-1.6
  • systemtap-sdt-devel >= 3.0-1.6
  • systemtap-server >= 3.0-1.6
Patchnames:
openSUSE Tumbleweed GA systemtap