Published: 01/03/2013 Updated: 13/02/2023

CVSS v2 Base Score: 6.2 | Impact Score: 10 | Exploitability Score: 1.9

VMScore: 553

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel prior to 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.0.25
linux linux kernel 3.0.22
linux linux kernel 3.0.5
linux linux kernel 3.0.38
linux linux kernel 3.0.63
linux linux kernel 3.0.46
linux linux kernel 3.0.47
linux linux kernel 3.0.48
linux linux kernel 3.0.18
linux linux kernel 3.0.6
linux linux kernel 3.0.36
linux linux kernel 3.0.35
linux linux kernel 3.0.11
linux linux kernel 3.0.58
linux linux kernel 3.0.34
linux linux kernel 3.0.32
linux linux kernel 3.0.52
linux linux kernel 3.0.51
linux linux kernel 3.0.57
linux linux kernel 3.0.19
linux linux kernel 3.0.37
linux linux kernel 3.0.4
linux linux kernel 3.0.27
linux linux kernel 3.0.42
linux linux kernel 3.0.23
linux linux kernel 3.0.62
linux linux kernel 3.0.49
linux linux kernel 3.0.8
linux linux kernel 3.0.64
linux linux kernel 3.0.40
linux linux kernel 3.0.33
linux linux kernel 3.0.28
linux linux kernel
linux linux kernel 3.0.54
linux linux kernel 3.0.13
linux linux kernel 3.0.55
linux linux kernel 3.0.10
linux linux kernel 3.0.1
linux linux kernel 3.0.17
linux linux kernel 3.0.44
linux linux kernel 3.0.16
linux linux kernel 3.0.21
linux linux kernel 3.0.7
linux linux kernel 3.0.61
linux linux kernel 3.0.20
linux linux kernel 3.0.24
linux linux kernel 3.0.15
linux linux kernel 3.0.45
linux linux kernel 3.0.39
linux linux kernel 3.0.2
linux linux kernel 3.0.67
linux linux kernel 3.0.59
linux linux kernel 3.0.60
linux linux kernel 3.0.56
linux linux kernel 3.0.12
linux linux kernel 3.0.66
linux linux kernel 3.0.3
linux linux kernel 3.0.65
linux linux kernel 3.0.53
linux linux kernel 3.0.9
linux linux kernel 3.0.26
linux linux kernel 3.0.43
linux linux kernel 3.0.30
linux linux kernel 3.0.31
linux linux kernel 3.0.29
linux linux kernel 3.0.50
linux linux kernel 3.0.14
linux linux kernel 3.0.41

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and various bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant secur ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-1020 Kees Cook discovered an issue in the /proc filesystem that allows local users to gain access to sensitive process in ...

IPv6 fragment identification value generation could allow a remote attacker to disrupt a target system's networking, preventing legitimate users from accessing its services (CVE-2011-2699, Important) A signedness issue was found in the Linux kernel's CIFS (Common Internet File System) implementation A malicious CIFS server could send a specially- ...

Several security issues were fixed in the kernel ...

NVD-CWE-Other http://www.openwall.com/lists/oss-security/2011/08/09/6 https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea https://bugzilla.redhat.com/show_bug.cgi?id=729808 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea https://access.redhat.com/errata/RHSA-2011:1465 https://nvd.nist.gov https://usn.ubuntu.com/1240-1/https://www.debian.org/security/./dsa-2303

CVE-2011-2905

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect