| Package | Affected versions | Patched versions |
|---|---|---|
| oprofile | = 0.1= 0.2= 0.3= 0.4= 0.5= 0.5.1= 0.5.2= 0.5.3= 0.5.4= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.8.1= 0.8.2= 0.9= 0.9.1= 0.9.2= 0.9.3= 0.9.4= 0.9.5≤ 0.9.6 |
The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free