Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2009-4273

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

Related bugs and status

CVE-2009-4273 (Candidate) is related to these bugs:

Bug #1203590: [MIR] systemtap

Summary				In	Importance	Status
	1203590	[MIR] systemtap		systemtap (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://www.vupen.com/e...
MISC: http://www.vupen.com/e...
MISC: http://lists.fedorapro...
MISC: http://lists.fedorapro...
MISC: http://lists.fedorapro...
MISC: http://lists.fedorapro...
MISC: https://bugzilla.redha...
MISC: http://www.redhat.com/...
MISC: http://lists.opensuse....
MISC: http://lists.fedorapro...
MISC: http://sourceware.org/...
MISC: http://sourceware.org/...
MISC: http://sourceware.org/...
MISC: https://oval.cisecurit...