CVE-2011-1760

Published: Jun 9, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20110429 CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=700883

x_refsource_CONFIRM

[oss-security] 20110511 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

45205

third-party-advisory

x_refsource_SECUNIA

[oss-security] 20110502 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

47652

vdb-entry

x_refsource_BID

44790

third-party-advisory

x_refsource_SECUNIA

[oss-security] 20110503 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

USN-1166-1

vendor-advisory

x_refsource_UBUNTU

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212

x_refsource_CONFIRM

[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo

mailing-list

x_refsource_MLIST

DSA-2254

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2011-1760

Description

Affected Products

References