SystemTap Local Privilege Escalation Vulnerability

Bugtraq ID:	34260
Class:	Race Condition Error
CVE:	CVE-2009-0784
Remote:	No
Local:	Yes
Published:	Mar 25 2009 12:00AM
Updated:	Apr 01 2009 05:16PM
Credit:	Erik Sjoelund
Vulnerable:	SystemTap SystemTap 0.0.20090314 SystemTap SystemTap 0.0.20080705 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Messaging Storage Server MSS 3.0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server
Not Vulnerable:

SystemTap Local Privilege Escalation Vulnerability

SystemTap is prone to a local privilege-escalation vulnerability because of a race-condition error.

An attacker can exploit this vulnerability to run arbitrary code with elevated privileges.

This issue affects SystemTap 0.0.20080705 and 0.0.20090314.

SystemTap Local Privilege Escalation Vulnerability

An attacker can use system utilities to carry out this attack.

SystemTap Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

SystemTap Local Privilege Escalation Vulnerability

References:

• Fix for CVE-2009-0784: stapusr module-path checking race (SystemTap)
  
• Red Hat Bugzilla �?? Bug 489808 (Red Hat)
  
• SystemTap Homepage (SystemTap)
  
• ASA-2009-110 (RHSA-2009-0373) (Avaya)