Detections
Analytics
CentOS 4 / 5 : systemtap (CESA-2009:0373)
medium Nessus Plugin ID 43735
Language:
Synopsis
The remote CentOS host is missing one or more security updates.Description
Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5.This update has been rated as having moderate security impact by the Red Hat Security Response Team.
SystemTap is an instrumentation infrastructure for systems running version 2.6 of the Linux kernel. SystemTap scripts can collect system operations data, greatly simplifying information gathering. Collected data can then assist in performance measuring, functional testing, and performance and function problem diagnosis.
A race condition was discovered in SystemTap that could allow users in the stapusr group to elevate privileges to that of members of the stapdev group (and hence root), bypassing directory confinement restrictions and allowing them to insert arbitrary SystemTap kernel modules. (CVE-2009-0784)
Note: This issue was only exploitable if another SystemTap kernel module was placed in the 'systemtap/' module directory for the currently running kernel.
Red Hat would like to thank Erik Sjolund for reporting this issue.
SystemTap users should upgrade to these updated packages, which contain a backported patch to correct this issue.
Solution
Update the affected systemtap packages.See Also
http://www.nessus.org/u?39f7b38f
http://www.nessus.org/u?510dd9f4
http://www.nessus.org/u?603d5057
Plugin Details
Severity: Medium
ID: 43735
File Name: centos_RHSA-2009-0373.nasl
Version: 1.14
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 1/6/2010
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:centos:centos:systemtap-runtime, p-cpe:/a:centos:centos:systemtap, p-cpe:/a:centos:centos:systemtap-testsuite, p-cpe:/a:centos:centos:systemtap-client, cpe:/o:centos:centos:4, cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:systemtap-server
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Patch Publication Date: 4/9/2009
Vulnerability Publication Date: 3/25/2009
Reference Information
CVE: CVE-2009-0784