CVE-2011-2472

Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier

Description A directory traversal issue exists, potentially allowing local users to overwrite arbitrary files by providing a .. (dot dot) in the --save argument, related to the --session-dir argument.

Recommendations For OProfile versions 0.9.6 and earlier, consider restricting access to the utils/opcontrol component to minimize the risk of exploitation. Avoid using the --save argument with untrusted input until the issue is resolved.