CVE

Id
49672  
CVE No.
CVE-2011-1760  
Status
Candidate  
Description
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539412 49672 CVE-2011-1760 MLIST:[oss-security] 20110429 CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539413 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/04/29/3  View
539414 49672 CVE-2011-1760 MLIST:[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539415 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/01/1  View
539416 49672 CVE-2011-1760 MLIST:[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539417 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/01/2  View
539418 49672 CVE-2011-1760 MLIST:[oss-security] 20110502 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539419 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/02/17  View
539420 49672 CVE-2011-1760 MLIST:[oss-security] 20110503 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539421 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/03/2  View
539422 49672 CVE-2011-1760 MLIST:[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539423 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/10/6  View
539424 49672 CVE-2011-1760 MLIST:[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539425 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/10/7  View
539426 49672 CVE-2011-1760 MLIST:[oss-security] 20110511 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
539427 49672 CVE-2011-1760 URL:http://openwall.com/lists/oss-security/2011/05/11/1  View
539428 49672 CVE-2011-1760 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212  View
539429 49672 CVE-2011-1760 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=700883  View
539430 49672 CVE-2011-1760 DEBIAN:DSA-2254  View
539431 49672 CVE-2011-1760 URL:http://www.debian.org/security/2011/dsa-2254  View
539432 49672 CVE-2011-1760 UBUNTU:USN-1166-1  View
539433 49672 CVE-2011-1760 URL:http://www.ubuntu.com/usn/USN-1166-1  View
539434 49672 CVE-2011-1760 BID:47652  View
539435 49672 CVE-2011-1760 URL:http://www.securityfocus.com/bid/47652  View
539436 49672 CVE-2011-1760 SECUNIA:45205  View
539437 49672 CVE-2011-1760 URL:http://secunia.com/advisories/45205  View
539438 49672 CVE-2011-1760 SECUNIA:44790  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34304 JVNDB-2011-004546 MediaWiki におけるクロスサイトスクリプティングの脆弱性 MediaWiki は、Internet Explorer 6 またはそれ以前のバージョンが使われた際、 クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1765 49672 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004546.html  View