CVE-2011-2473

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted…

published June 9, 2011

CVSS
—
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00401 · 33.0th percentile
Published
2011-06-09T21:00Z
EPSS history
Timeline
  • 09 JUN 21:00Z
    The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted…
    cvelistv5