CVE:CVE-2011-2502
CNNVD:CNNVD-201107-393
SystemTap 1.6之前的版本中的systemtap运行时间工具（staprun）中的runtime/staprun/staprun_funcs.c中存在漏洞，该漏洞源于当模块路径指定为用户空间探测的用户未正确验证模块。本地攻击者利用该漏洞通过在-u参数的搜索路径中的特制模块在stapus组中获得特权。
solution:Upgrade systemtap systemtap to a higher version than 1.5,0.2.2,0.3,0.4,0.5,0.5.3,0.5.4,0.5.5,0.5.7,0.5.8,0.5.9,0.5.10,0.5.12,0.5.13,0.5.14,0.6,0.6.2,0.7,0.7.2,0.8,0.9,0.9.5,0.9.7,0.9.8,0.9.9,1.0,1.1,1.2,1.3,1.4,and avoid the version (,1.5],0.2.2,0.3,0.4,0.5,0.5.3,0.5.4,0.5.5,0.5.7,0.5.8,0.5.9,0.5.10,0.5.12,0.5.13,0.5.14,0.6,0.6.2,0.7,0.7.2,0.8,0.9,0.9.5,0.9.7,0.9.8,0.9.9,1.0,1.1,1.2,1.3,1.4