Unrated severityNVD Advisory· Published Dec 7, 2010· Updated Jun 16, 2026
CVE-2010-4170
CVE-2010-4170
Description
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
19- www.exploit-db.com/exploits/15620nvdExploit
- www.securityfocus.com/bid/44914nvdExploit
- secunia.com/advisories/42256nvdVendor Advisory
- secunia.com/advisories/42263nvdVendor Advisory
- secunia.com/advisories/42306nvdVendor Advisory
- secunia.com/advisories/42318nvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.htmlnvd
- packetstormsecurity.com/files/152569/SystemTap-1.3-MODPROBE_OPTIONS-Privilege-Escalation.htmlnvd
- secunia.com/advisories/46920nvd
- sources.redhat.com/git/gitweb.cginvd
- sources.redhat.com/ml/systemtap/2010-q4/msg00230.htmlnvd
- www.debian.org/security/2011/dsa-2348nvd
- www.redhat.com/support/errata/RHSA-2010-0894.htmlnvd
- www.redhat.com/support/errata/RHSA-2010-0895.htmlnvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/63344nvd
- www.exploit-db.com/exploits/46730/nvd
News mentions
0No linked articles in our index yet.