CVE-2011-2471

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.48% chance of exploitation in the next 30 days, 40th percentile

Published

2011-06-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugzilla.redhat.com/show_bug.cgi?id=700883

References

• CVE Record
• NVD entry

Related

• CVE-2011-2462
• CVE-2011-2472
• CVE-2011-2461
• CVE-2011-2474
• CVE-2011-2443
• CVE-2011-2505