Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2006-0576

security flaw

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Maynard Johnson Redhat
Products
Oprofile Enterprise Linux
CVE-2011-1760

oprofile: Local privilege escalation via crafted opcontrol event parameter

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.

CVSS 2.0 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Maynard Johnson
Products
Oprofile
CVE-2011-2471

oprofile: Local privilege escalation via shell metacharacters

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Maynard Johnson
Products
Oprofile
CVE-2011-2472

oprofile: Directory traversal vulnerability in utils/opcontrol

Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Maynard Johnson
Products
Oprofile
CVE-2011-2473

oprofile: do_dump_data function symlink attack via opd_pipe

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Maynard Johnson
Products
Oprofile