Fedora Update for oprofile FEDORA-2011-8087

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for oprofile FEDORA-2011-8076

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: oprofile-0.9.6-21.fc15

OProfile is a profiling system for systems running Linux. The profiling runs transparently during the background, and profile data can be collected at any time. OProfile makes use of the hardware performance counters provided on Intel P6, and AMD Athlon family processors, and can use the RTC for...

[SECURITY] Fedora 14 Update: oprofile-0.9.6-21.fc14

OProfile is a profiling system for systems running Linux. The profiling runs transparently during the background, and profile data can be collected at any time. OProfile makes use of the hardware performance counters provided on Intel P6, and AMD Athlon family processors, and can use the RTC for...

Fedora 15 : oprofile-0.9.6-21.fc15 (2011-8076)

When opcontrol was run by a normal user with sudo access it was possible for the user to craft options to opcontrol that would allow commands to be run with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Ubuntu Update for oprofile USN-1166-1

Ubuntu Update for Linux kernel vulnerabilities USN-1166-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11661.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for oprofile USN-1166-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu: Security Advisory (USN-1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2254-2] oprofile security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2254-2 [email protected] http://www.debian.org/security/ Luciano Bello July 11, 2011 http://www.debian.org/security/faq -...

DSA-2254-2 oprofile - command injection

Bulletin has no description...

Ubuntu 10.04 LTS : oprofile vulnerabilities (USN-1166-1)

Stephane Chauveau discovered that OProfile did not properly perform input validation when processing arguments to opcontrol. A local user who is allowed to run opcontrol with privileges could exploit this to run arbitrary commands as the privileged user. CVE-2011-1760, CVE-2011-2471 Stephane...

USN-1166-1: OProfile vulnerabilities

Stephane Chauveau discovered that OProfile did not properly perform input validation when processing arguments to opcontrol. A local user who is allowed to run opcontrol with privileges could exploit this to run arbitrary commands as the privileged user. CVE-2011-1760, CVE-2011-2471 Stephane...

OProfile Version Detection

This script finds the installed OProfile version and saves the result in KB. OpenVAS Vulnerability Test $Id: gboprofiledetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ OProfile Version Detection Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

OProfile Detection (Linux/Unix SSH Login)

Checks whether OProfile is present on the target system and if so, tries to figure out the installed version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

OProfile <= 0.9.6 Multiple Vulnerabilities

OProfile is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:maynardjohnson:oprofile";...

[SECURITY] [DSA 2254-1] oprofile security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------------- Debian Security Advisory DSA 2254-1 [email protected] http://www.debian.org/security/ Luciano Bello June 3, 2011 http://www.debian.org/security/faq -...

OProfile privilege escalation

Privilege escalation via opcontrol...

Debian DSA-2254-1 : oprofile - command injection

OProfile is a performance profiling tool which is configurable by opcontrol, its control utility. Stephane Chauveau reported several ways to inject arbitrary commands in the arguments of this utility. If a local unprivileged user is authorized by sudoers file to run opcontrol as root, this user...

CVE-2011-2471

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...

CVE-2011-2473

The dodumpdata function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opdpipe file, a different vulnerability than CVE-2011-1760...

CVE-2011-2472

Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. dot dot in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760...