CVE-2011-2502

Related Files

Red Hat Security Advisory 2011-1088-01

Posted Jul 26, 2011

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2011-1088-01 - SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the operation of the system. It was found that SystemTap did not perform proper module path sanity checking if a user specified a custom path to the uprobes module, used when performing user-space probing . A local user who is a member of the stapusr group could use this flaw to bypass intended module-loading restrictions, allowing them to escalate their privileges by loading an arbitrary, unsigned module.

tags | advisory, arbitrary, kernel, local

systems | linux, redhat

advisories | CVE-2011-2502, CVE-2011-2503

SHA-256 | 52adcc4a9aefd37945fc629fa15624c8c51c02f09250bb3313127c02d6605f9c

Download | Favorite | View