vendor:
Red Hat Enterprise Linux
by:
Red Hat
7,2
CVSS
HIGH
Local Privilege Escalation
264
CWE
Product Name: Red Hat Enterprise Linux
Affected Version From: Red Hat Enterprise Linux 5
Affected Version To: Red Hat Enterprise Linux 5
Patch Exists: YES
Related CWE: CVE-2010-4170
CPE: o:redhat:enterprise_linux:5
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2010
CVE-2010-4170
This exploit allows a local user to gain root privileges on a system running Red Hat Enterprise Linux 5. The exploit is based on a vulnerability in the SystemTap package, which allows a local user to execute arbitrary code with root privileges. The exploit works by creating a malicious SystemTap configuration file, which is then loaded by the staprun command. The malicious configuration file contains a printf command that will execute a shell script with root privileges.
Mitigation:
Red Hat has released a patch for this vulnerability.