CVE-2011-2471
09.06.2011, 21:55
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.Enginsight
| Vendor | Product | Version |
|---|---|---|
| maynard_johnson | oprofile | 𝑥 ≤ 0.9.6 |
| maynard_johnson | oprofile | 0.1 |
| maynard_johnson | oprofile | 0.2 |
| maynard_johnson | oprofile | 0.3 |
| maynard_johnson | oprofile | 0.4 |
| maynard_johnson | oprofile | 0.5 |
| maynard_johnson | oprofile | 0.5.1 |
| maynard_johnson | oprofile | 0.5.2 |
| maynard_johnson | oprofile | 0.5.3 |
| maynard_johnson | oprofile | 0.5.4 |
| maynard_johnson | oprofile | 0.6 |
| maynard_johnson | oprofile | 0.6.1 |
| maynard_johnson | oprofile | 0.7 |
| maynard_johnson | oprofile | 0.7.1 |
| maynard_johnson | oprofile | 0.8 |
| maynard_johnson | oprofile | 0.8.1 |
| maynard_johnson | oprofile | 0.8.2 |
| maynard_johnson | oprofile | 0.9 |
| maynard_johnson | oprofile | 0.9.1 |
| maynard_johnson | oprofile | 0.9.2 |
| maynard_johnson | oprofile | 0.9.3 |
| maynard_johnson | oprofile | 0.9.4 |
| maynard_johnson | oprofile | 0.9.5 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References