← Back

CVE-2011-2471

nvd nist
Published: Jun 9, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.

Affected (23)

Maynard Johnson
1 product
Oprofile
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Maynard Johnson
Oprofile
Up to 0.9.6
Oprofile
Version 0.1
Oprofile
Version 0.2
Oprofile
Version 0.3
Oprofile
Version 0.4
Oprofile
Version 0.5.1
Oprofile
Version 0.5.2
Oprofile
Version 0.5.3
Oprofile
Version 0.5.4
Oprofile
Version 0.5
Oprofile
Version 0.6.1
Oprofile
Version 0.6
Oprofile
Version 0.7.1
Oprofile
Version 0.7
Oprofile
Version 0.8.1
Oprofile
Version 0.8.2
Oprofile
Version 0.8
Oprofile
Version 0.9.1
Oprofile
Version 0.9.2
Oprofile
Version 0.9.3
Oprofile
Version 0.9.4
Oprofile
Version 0.9.5
Oprofile
Version 0.9

Related CWEs

CWE-264
CWE-264

References (20)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.