Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-4273

high · 10

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

10
CVSS
17.7%
EPSS (exploit prob.)
97th
EPSS percentile
2010-01-26
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
systemtapsystemtap<= 1.0
systemtapsystemtap0.2.2
systemtapsystemtap0.3
systemtapsystemtap0.4
systemtapsystemtap0.5
systemtapsystemtap0.5.3
systemtapsystemtap0.5.4
systemtapsystemtap0.5.5
systemtapsystemtap0.5.7
systemtapsystemtap0.5.8
systemtapsystemtap0.5.9
systemtapsystemtap0.5.10
systemtapsystemtap0.5.12
systemtapsystemtap0.5.13
systemtapsystemtap0.5.14
systemtapsystemtap0.6
systemtapsystemtap0.6.2
systemtapsystemtap0.7
systemtapsystemtap0.7.2
systemtapsystemtap0.8
systemtapsystemtap0.9
systemtapsystemtap0.9.5
systemtapsystemtap0.9.7
systemtapsystemtap0.9.8
systemtapsystemtap0.9.9

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-4273