Lucene search
RedhatCVE-2011-2905HistoryMar 01, 2013 - 12:37 p.m.
CVE-2011-2905
2013-03-0112:37:53
redhat
web.nvd.nist.gov
63
cve-2011-2905
untrusted search path
perf
linux kernel
vulnerability
nvd
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
Affected configurations
Node
linuxlinux_kernelRange≤3.0.68
ORlinuxlinux_kernelMatch3.0.1
ORlinuxlinux_kernelMatch3.0.2
ORlinuxlinux_kernelMatch3.0.3
ORlinuxlinux_kernelMatch3.0.4
ORlinuxlinux_kernelMatch3.0.5
ORlinuxlinux_kernelMatch3.0.6
ORlinuxlinux_kernelMatch3.0.7
ORlinuxlinux_kernelMatch3.0.8
ORlinuxlinux_kernelMatch3.0.9
ORlinuxlinux_kernelMatch3.0.10
ORlinuxlinux_kernelMatch3.0.11
ORlinuxlinux_kernelMatch3.0.12
ORlinuxlinux_kernelMatch3.0.13
ORlinuxlinux_kernelMatch3.0.14
ORlinuxlinux_kernelMatch3.0.15
ORlinuxlinux_kernelMatch3.0.16
ORlinuxlinux_kernelMatch3.0.17
ORlinuxlinux_kernelMatch3.0.18
ORlinuxlinux_kernelMatch3.0.19
ORlinuxlinux_kernelMatch3.0.20
ORlinuxlinux_kernelMatch3.0.21
ORlinuxlinux_kernelMatch3.0.22
ORlinuxlinux_kernelMatch3.0.23
ORlinuxlinux_kernelMatch3.0.24
ORlinuxlinux_kernelMatch3.0.25
ORlinuxlinux_kernelMatch3.0.26
ORlinuxlinux_kernelMatch3.0.27
ORlinuxlinux_kernelMatch3.0.28
ORlinuxlinux_kernelMatch3.0.29
ORlinuxlinux_kernelMatch3.0.30
ORlinuxlinux_kernelMatch3.0.31
ORlinuxlinux_kernelMatch3.0.32
ORlinuxlinux_kernelMatch3.0.33
ORlinuxlinux_kernelMatch3.0.34
ORlinuxlinux_kernelMatch3.0.35
ORlinuxlinux_kernelMatch3.0.36
ORlinuxlinux_kernelMatch3.0.37
ORlinuxlinux_kernelMatch3.0.38
ORlinuxlinux_kernelMatch3.0.39
ORlinuxlinux_kernelMatch3.0.40
ORlinuxlinux_kernelMatch3.0.41
ORlinuxlinux_kernelMatch3.0.42
ORlinuxlinux_kernelMatch3.0.43
ORlinuxlinux_kernelMatch3.0.44
ORlinuxlinux_kernelMatch3.0.45
ORlinuxlinux_kernelMatch3.0.46
ORlinuxlinux_kernelMatch3.0.47
ORlinuxlinux_kernelMatch3.0.48
ORlinuxlinux_kernelMatch3.0.49
ORlinuxlinux_kernelMatch3.0.50
ORlinuxlinux_kernelMatch3.0.51
ORlinuxlinux_kernelMatch3.0.52
ORlinuxlinux_kernelMatch3.0.53
ORlinuxlinux_kernelMatch3.0.54
ORlinuxlinux_kernelMatch3.0.55
ORlinuxlinux_kernelMatch3.0.56
ORlinuxlinux_kernelMatch3.0.57
ORlinuxlinux_kernelMatch3.0.58
ORlinuxlinux_kernelMatch3.0.59
ORlinuxlinux_kernelMatch3.0.60
ORlinuxlinux_kernelMatch3.0.61
ORlinuxlinux_kernelMatch3.0.62
ORlinuxlinux_kernelMatch3.0.63
ORlinuxlinux_kernelMatch3.0.64
ORlinuxlinux_kernelMatch3.0.65
ORlinuxlinux_kernelMatch3.0.66
ORlinuxlinux_kernelMatch3.0.67
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 3.0.41 | cpe:/o:linux:linux_kernel:3.0.41::: |
| linux | linux_kernel | 3.0.47 | cpe:/o:linux:linux_kernel:3.0.47::: |
| linux | linux_kernel | 3.0.29 | cpe:/o:linux:linux_kernel:3.0.29::: |
| linux | linux_kernel | 3.0.60 | cpe:/o:linux:linux_kernel:3.0.60::: |
| linux | linux_kernel | 3.0.52 | cpe:/o:linux:linux_kernel:3.0.52::: |
| linux | linux_kernel | 3.0.9 | cpe:/o:linux:linux_kernel:3.0.9::: |
| linux | linux_kernel | 3.0.4 | cpe:/o:linux:linux_kernel:3.0.4::: |
| linux | linux_kernel | 3.0.64 | cpe:/o:linux:linux_kernel:3.0.64::: |
| linux | linux_kernel | 3.0.5 | cpe:/o:linux:linux_kernel:3.0.5::: |
| linux | linux_kernel | 3.0.26 | cpe:/o:linux:linux_kernel:3.0.26::: |
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
www.openwall.com/lists/oss-security/2011/08/09/6
bugzilla.redhat.com/show_bug.cgi?id=729808
github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea
Related
openvas
openvas
Fedora Update for kernel FEDORA-2011-11019
2011-08-19 00:00:00
Fedora Update for kernel FEDORA-2011-11019
2011-08-19 00:00:00
Fedora Update for kernel FEDORA-2011-13809
2011-10-10 00:00:00
nvd
nvd
CVE-2011-2905
2013-03-01 12:37:53
nessus
nessus
SuSE 11.1 Security Update : perf (SAT Patch Number 5417)
2011-12-13 00:00:00
Fedora 15 : kernel-2.6.40.3-0.fc15 (2011-11019)
2011-08-18 00:00:00
Ubuntu 11.04 : linux vulnerabilities (USN-1285-1)
2011-11-30 00:00:00
prion
prion
Design/Logic Flaw
2013-03-01 12:37:00
seebug
seebug
Linux Kernel 'perf'工具本地特权提升漏洞
2011-08-15 00:00:00
ubuntucve
ubuntucve
CVE-2011-2905
2011-10-06 00:00:00
cvelist
cvelist
CVE-2011-2905
2013-03-01 11:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:08:20
fedora
fedora
[SECURITY] Fedora 15 Update: kernel-2.6.40.3-0.fc15
2011-08-18 02:34:58
[SECURITY] Fedora 15 Update: kernel-2.6.40.6-0.fc15
2011-10-05 23:59:09
[SECURITY] Fedora 15 Update: kernel-2.6.41.1-1.fc15
2011-11-17 23:29:35
ubuntu
ubuntu
Linux (Natty backport) vulnerabilities
2011-11-24 00:00:00
Linux kernel vulnerabilities
2011-11-29 00:00:00
Linux kernel vulnerabilities
2011-10-25 00:00:00
securityvulns
securityvulns
[USN-1281-1] Linux (OMAP4) vulnerabilities
2011-11-27 00:00:00
Linux kernel multiple security vulnerabilities
2011-11-27 00:00:00
[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression
2011-09-13 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2011-11-25 00:00:00
kernel security and bug fix update
2011-11-22 00:00:00
Oracle Linux 6 kernel security, bug fix and enhancement update
2011-12-14 00:00:00
redhat
redhat
(RHSA-2011:1465) Important: kernel security and bug fix update
2011-11-22 00:00:00
amazon
amazon
Medium: kernel
2011-12-02 22:23:00
osv
osv
linux-2.6 - several issues
2011-09-10 00:00:00
debian
debian
[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression
2011-09-11 02:06:57
[SECURITY] [DSA 2303-1] linux-2.6 security update
2011-09-08 21:31:02
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2011-2905