NetSight
IP …
critical10.0Public exploit code

CVE-2009-4273

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

Affected products

VendorProductAffected versions
SystemtapSystemtap
through 1.0
Versions 0.2.2, 0.3, 0.4, 0.5, 0.5.3

Weakness classification

CWE-94

References