NVD

Id
9253  
Name
CVE-2011-2473  
Description
The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-06-09  
Modified Date
2011-09-06  
Seq
2011-2473  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52893 9253 CVE-2011-2473 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212  View
52894 9253 CVE-2011-2473 [oss-security] 20110503 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
52895 9253 CVE-2011-2473 [oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
52896 9253 CVE-2011-2473 [oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
52897 9253 CVE-2011-2473 [oss-security] 20110511 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo  View
52898 9253 CVE-2011-2473 DSA-2254  View
52899 9253 CVE-2011-2473 oprofile-opcontrol-symlink(67978)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34469 JVNDB-2011-004711 OProfile の do_dump_data 関数における任意のファイルを作成または上書きされる脆弱性 OProfile の utils/opcontrol の do_dump_data 関数には、任意のファイルを作成または上書きされる脆弱性が存在します。 CVE-2011-2473 50380 CVE-2011-2473 9253 6.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004711.html 2011-06-09 2012-03-27 View