Skip to main content

Vendor/product archive

maynard_johnson / oprofile CVEs

Beta · best-effort

5 CVEs tagged to maynard_johnson / oprofile0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.

CVE-2011-2473

Published Jun 9, 2011

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in c…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2011-2472

Published Jun 9, 2011

Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument,…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2011-2471

Published Jun 9, 2011

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, r…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2011-1760

Published Jun 9, 2011

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2006-0576

Published Feb 8, 2006

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) w…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1