Two vulnerabilities have been reported in SystemTap, which can be exploited by malicious, local users to gain escalated privileges and cause a DoS (Denial of Service).

1) An improper environment sanitation in the "/usr/bin/staprun" setuid program when loading kernel modules can be exploited to escalate privileges.

2) An error in the "/usr/bin/staprun" setuid program when unloading kernel modules can be exploited to unload arbitrary unused modules and potentially cause a DoS.

The vulnerabilities are reported in version 1.3. Other versions may also be affected.

Solution
Update to version 1.4.

Provided and/or discovered by
The vendor credits Tavis Ormandy.

Changelog
Further details available in Customer Area

Original Advisory
http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html

Deep Links
Links available in Customer Area