Vulnerabilities

TI-2011-02165 CVE-2011-2473 · GHSA-m545-63mf-qh6w

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow…

LOW 28

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the o…

CVSS 2.0MEDIUM 6.3 Local No auth Interaction — EPSS 0.00401 Published 2011-06-09 No fix listed CWE-59

TI-2011-02164 CVE-2011-2472 · GHSA-x5g3-v6r9-gfqm

Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might…

LOW 29

Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a ..

CVSS 2.0MEDIUM 6.3 Local No auth Interaction — EPSS 0.00542 Published 2011-06-09 No fix listed CWE-22

TI-2011-02163 CVE-2011-2471 · GHSA-jvp9-2x6w-jpq3

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges…

LOW 32

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_sa…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00484 Published 2011-06-09 No fix listed CWE-264

TI-2011-01539 CVE-2011-1760 · GHSA-ccgc-crp4-f2mf

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval…

LOW 34

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01367 Published 2011-06-09 No fix listed CWE-94

TI-2006-00559 CVE-2006-0576 · GHSA-9xvh-2qpv-m4fg

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows…