CVE-2011-2473

OProfile < 0.9.6 - Arbitrary File Creation via Symlink Attack on opd_pipe

Title source: llm
STIX 2.1

Description

The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.

References (7)

Core 7
Core References
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/03/1
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/10/7
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/11/1
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/10/6
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2254
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67978

Scores

EPSS 0.0040
EPSS Percentile 31.8%

Details

CWE
CWE-59
Status published
Products (23)
maynard_johnson/oprofile 0.1
maynard_johnson/oprofile 0.2
maynard_johnson/oprofile 0.3
maynard_johnson/oprofile 0.4
maynard_johnson/oprofile 0.5
maynard_johnson/oprofile 0.5.1
maynard_johnson/oprofile 0.5.2
maynard_johnson/oprofile 0.5.3
maynard_johnson/oprofile 0.5.4
maynard_johnson/oprofile 0.6
... and 13 more
Published Jun 09, 2011
Tracked Since Feb 18, 2026