Lucene search

MitreCVE-2006-0576

HistoryFeb 08, 2006 - 12:06 a.m.

CVE-2006-0576

2006-02-0800:06:00

mitre

web.nvd.nist.gov

cve-2006-0576

untrusted search path

vulnerability

oprofile

opcontrol

arbitrary commands

path

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.

Affected configurations

Nvd

Node

maynard_johnsonoprofileRange≤0.9.1

maynard_johnsonoprofileMatch0.1

maynard_johnsonoprofileMatch0.2

maynard_johnsonoprofileMatch0.3

maynard_johnsonoprofileMatch0.4

maynard_johnsonoprofileMatch0.5

maynard_johnsonoprofileMatch0.5.1

maynard_johnsonoprofileMatch0.5.2

maynard_johnsonoprofileMatch0.5.3

maynard_johnsonoprofileMatch0.5.4

maynard_johnsonoprofileMatch0.6

maynard_johnsonoprofileMatch0.6.1

maynard_johnsonoprofileMatch0.7

maynard_johnsonoprofileMatch0.7.1

maynard_johnsonoprofileMatch0.8

maynard_johnsonoprofileMatch0.8.1

maynard_johnsonoprofileMatch0.8.2

maynard_johnsonoprofileMatch0.9

VendorProductVersionCPE
maynard_johnsonoprofile*cpe:2.3:a:maynard_johnson:oprofile:*:*:*:*:*:*:*:*
maynard_johnsonoprofile0.1cpe:2.3:a:maynard_johnson:oprofile:0.1:*:*:*:*:*:*:*
maynard_johnsonoprofile0.2cpe:2.3:a:maynard_johnson:oprofile:0.2:*:*:*:*:*:*:*
maynard_johnsonoprofile0.3cpe:2.3:a:maynard_johnson:oprofile:0.3:*:*:*:*:*:*:*
maynard_johnsonoprofile0.4cpe:2.3:a:maynard_johnson:oprofile:0.4:*:*:*:*:*:*:*
maynard_johnsonoprofile0.5cpe:2.3:a:maynard_johnson:oprofile:0.5:*:*:*:*:*:*:*
maynard_johnsonoprofile0.5.1cpe:2.3:a:maynard_johnson:oprofile:0.5.1:*:*:*:*:*:*:*
maynard_johnsonoprofile0.5.2cpe:2.3:a:maynard_johnson:oprofile:0.5.2:*:*:*:*:*:*:*
maynard_johnsonoprofile0.5.3cpe:2.3:a:maynard_johnson:oprofile:0.5.3:*:*:*:*:*:*:*
maynard_johnsonoprofile0.5.4cpe:2.3:a:maynard_johnson:oprofile:0.5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
maynard_johnson	oprofile	*	cpe:2.3:a:maynard_johnson:oprofile::::::::
maynard_johnson	oprofile	0.1	cpe:2.3:a:maynard_johnson:oprofile:0.1:::::::*
maynard_johnson	oprofile	0.2	cpe:2.3:a:maynard_johnson:oprofile:0.2:::::::*
maynard_johnson	oprofile	0.3	cpe:2.3:a:maynard_johnson:oprofile:0.3:::::::*
maynard_johnson	oprofile	0.4	cpe:2.3:a:maynard_johnson:oprofile:0.4:::::::*
maynard_johnson	oprofile	0.5	cpe:2.3:a:maynard_johnson:oprofile:0.5:::::::*
maynard_johnson	oprofile	0.5.1	cpe:2.3:a:maynard_johnson:oprofile:0.5.1:::::::*
maynard_johnson	oprofile	0.5.2	cpe:2.3:a:maynard_johnson:oprofile:0.5.2:::::::*
maynard_johnson	oprofile	0.5.3	cpe:2.3:a:maynard_johnson:oprofile:0.5.3:::::::*
maynard_johnson	oprofile	0.5.4	cpe:2.3:a:maynard_johnson:oprofile:0.5.4:::::::*

Rows per page:

1-10 of 181

References

www.redhat.com/magazine/012oct05/features/oprofile/

www.securityfocus.com/archive/1/424325/100/0/threaded

www.securityfocus.com/bid/16536

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10890

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2006-0576