|
|
| |
|
| |
kernel: arbitrary command execution
| Package(s): | kernel |
CVE #(s): | CVE-2011-2905
|
| Created: | August 18, 2011 |
Updated: | November 28, 2011 |
| Description: |
From the Red Hat bugzilla:
It was reported that perf would look for configuration files in
/etc/perfconfig, ~/.perfconfig, and ./config. If ./config is not a perf
configuration file, perf could fail or possibly do unexpected things. If a
privileged user was tricked into running perf in a directory containing a
malicious ./config file, it could possibly lead to the execution of arbitrary
commands.
|
| Alerts: |
|
( Log in to post comments)
|
|
|