CVE-2011-2473

Published Jun 9, 2011

Last updated 7 years ago

Overview

Description
The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
6.3
Impact score
9.2
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:N/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-59

Configurations