CVE-2011-2473

Published: Jun 9, 2011Modified: Apr 29, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.

Affected (23)

Products: Maynard Johnson: Oprofile

Maynard Johnson

1 product

Oprofile

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Maynard Johnson Oprofile	Up to 0.9.6
Maynard Johnson Oprofile	Version 0.1
Maynard Johnson Oprofile	Version 0.2
Maynard Johnson Oprofile	Version 0.3
Maynard Johnson Oprofile	Version 0.4
Maynard Johnson Oprofile	Version 0.5.1
Maynard Johnson Oprofile	Version 0.5.2
Maynard Johnson Oprofile	Version 0.5.3
Maynard Johnson Oprofile	Version 0.5.4
Maynard Johnson Oprofile	Version 0.5
Maynard Johnson Oprofile	Version 0.6.1
Maynard Johnson Oprofile	Version 0.6
Maynard Johnson Oprofile	Version 0.7.1
Maynard Johnson Oprofile	Version 0.7
Maynard Johnson Oprofile	Version 0.8.1
Maynard Johnson Oprofile	Version 0.8.2
Maynard Johnson Oprofile	Version 0.8
Maynard Johnson Oprofile	Version 0.9.1
Maynard Johnson Oprofile	Version 0.9.2
Maynard Johnson Oprofile	Version 0.9.3
Maynard Johnson Oprofile	Version 0.9.4
Maynard Johnson Oprofile	Version 0.9.5
Maynard Johnson Oprofile	Version 0.9