CVE

Id
50383  
CVE No.
CVE-2011-2471  
Status
Candidate  
Description
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.  
Phase
Assigned (20110609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544666 50383 CVE-2011-2471 MLIST:[oss-security] 20110503 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
544667 50383 CVE-2011-2471 URL:http://openwall.com/lists/oss-security/2011/05/03/1  View
544668 50383 CVE-2011-2471 MLIST:[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
544669 50383 CVE-2011-2471 URL:http://openwall.com/lists/oss-security/2011/05/10/6  View
544670 50383 CVE-2011-2471 MLIST:[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
544671 50383 CVE-2011-2471 URL:http://openwall.com/lists/oss-security/2011/05/10/7  View
544672 50383 CVE-2011-2471 MLIST:[oss-security] 20110511 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
544673 50383 CVE-2011-2471 URL:http://openwall.com/lists/oss-security/2011/05/11/1  View
544674 50383 CVE-2011-2471 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212  View
544675 50383 CVE-2011-2471 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=700883  View
544676 50383 CVE-2011-2471 DEBIAN:DSA-2254  View
544677 50383 CVE-2011-2471 URL:http://www.debian.org/security/2011/dsa-2254  View
544678 50383 CVE-2011-2471 UBUNTU:USN-1166-1  View
544679 50383 CVE-2011-2471 URL:http://www.ubuntu.com/usn/USN-1166-1  View
544680 50383 CVE-2011-2471 SECUNIA:45205  View
544681 50383 CVE-2011-2471 URL:http://secunia.com/advisories/45205  View
544682 50383 CVE-2011-2471 XF:oprofile-opcontrol-priv-escalation(67980)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34472 JVNDB-2011-004714 CPG におけるクロスサイトスクリプティングの脆弱性 Coppermine Photo Gallery (CPG) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2476 50383 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004714.html  View