Maynard Johnson OProfile 0.5.3
Approved changes feed: RSS · Atom
cpe:2.3:a:maynard_johnson:oprofile:0.5.3:*:*:*:*:*:*:*part: a version: 0.5.3 update: *
| Vendor | Maynard Johnson (62dd85df-f194-5b86-9228-53cc8c0f0ba5) |
|---|---|
| Product | Oprofile (024902f6-c080-527c-b8d8-6a603fbac783) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/oprofile |
purl2cpe | 2026-06-01 10:15:55.398495 |
pkg:deb/ubuntu/oprofile |
purl2cpe | 2026-06-01 10:15:55.398497 |
pkg:github/marcusmueller/oprofile |
purl2cpe | 2026-06-01 10:15:55.398499 |
pkg:github/mer-tools/oprofile |
purl2cpe | 2026-06-01 10:15:55.398501 |
pkg:rpm/centos/oprofile |
purl2cpe | 2026-06-01 10:15:55.398502 |
pkg:rpm/opensuse/oprofile |
purl2cpe | 2026-06-01 10:15:55.398504 |
pkg:sourceforge/oprofile |
purl2cpe | 2026-06-01 10:15:55.398506 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-2473 |
vulnerable | 2026-06-08 04:58:07.149319 |
Details available
The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.
Published: 2011-06-09T21:00:00.000Z
Updated: 2024-08-06T23:00:34.162Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2472 |
vulnerable | 2026-06-08 04:58:07.148492 |
Details available
Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.
Published: 2011-06-09T21:00:00.000Z
Updated: 2024-08-06T23:00:33.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2471 |
vulnerable | 2026-06-08 04:58:07.147603 |
Details available
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.
Published: 2011-06-09T21:00:00.000Z
Updated: 2024-08-06T23:00:33.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1760 |
vulnerable | 2026-06-08 04:58:01.938536 |
Details available
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.
Published: 2011-06-09T19:00:00.000Z
Updated: 2024-08-06T22:37:25.783Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0576 |
vulnerable | 2026-06-08 04:48:54.549436 |
Details available
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.
Published: 2006-02-08T00:00:00.000Z
Updated: 2024-08-07T16:41:28.884Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.