Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/libsoup.Upgrade media-libs/fmod.Upgrade dev-libs/xmlsec.Upgrade x11-apps/xrdb.Upgrade net-misc/vino.Upgrade net-misc/rsync.Upgrade sys-apps/shadow.Upgrade sys-fs/lvm2.Upgrade dev-db/unixODBC.Upgrade dev-php/PEAR-PEAR.Upgrade gnome-base/gdm.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/mrouted.Upgrade dev-util/qt-creator.Upgrade app-office/gnucash.Upgrade net-analyzer/sflowtool.Upgrade media-libs/xine-lib.Upgrade app-misc/ca-certificates.Upgrade sys-cluster/resource-agents.Upgrade media-sound/lastfmplayer.Upgrade net-libs/webkit-gtk.Upgrade dev-util/oprofile.Upgrade app-admin/syslog-ng.Upgrade games-sports/racer-bin.Upgrade dev-vcs/gitolite. | Oct 30, 2017 | Jun 9, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 26, 2011 |
| Ubuntu | — | Upgrade oprofile | Nov 8, 2024 | Jun 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub