|
|
| |
|
| |
oprofile: privilege escalation/file overwrite
| Package(s): | oprofile |
CVE #(s): | CVE-2011-2471
CVE-2011-2472
|
| Created: | July 11, 2011 |
Updated: | July 13, 2011 |
| Description: |
From the CVE entries:
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760. (CVE-2011-2471)
Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760. (CVE-2011-2472) |
| Alerts: |
|
( Log in to post comments)
|
|
|