NVD

Id
9624  
Name
CVE-2011-2905  
Description
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2013-03-01  
Modified Date
2013-03-04  
Seq
2011-2905  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54991 9624 CVE-2011-2905 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=aba8d056078e47350d85b06a9cabd5afcc4b72ea  View
54992 9624 CVE-2011-2905 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1  View
54993 9624 CVE-2011-2905 [oss-security] 20110809 Re: CVE request: perf: may parse user-controlled config file  View
54994 9624 CVE-2011-2905 https://bugzilla.redhat.com/show_bug.cgi?id=729808  View
54995 9624 CVE-2011-2905 https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34980 JVNDB-2011-005222 Linux Kernel に同梱されている perf における任意のファイルを上書きされる脆弱性 Linux Kernel に同梱されている perf の tools/perf/util/config.c 内の perf_config 関数には、検索パスに関する処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2011-2905 50812 CVE-2011-2905 9624 6.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005222.html 2011-10-24 2013-03-05 View