OProfile OPControl Path Specification Local Privilege Escalation Vulnerability

Bugtraq ID:	16536
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 07 2006 12:00AM
Updated:	Feb 07 2006 12:00AM
Credit:	Luis Miguel Silva <[email protected]> discovered this issue.
Vulnerable:	OProfile OProfile 0.9.1 OProfile OProfile 0.8.2 OProfile OProfile 0.8.1 OProfile OProfile 0.7.1 OProfile OProfile 0.6.1 OProfile OProfile 0.5.4 OProfile OProfile 0.5.3 OProfile OProfile 0.5.2 OProfile OProfile 0.5.1 OProfile OProfile 0.9 OProfile OProfile 0.8 OProfile OProfile 0.7 OProfile OProfile 0.6 OProfile OProfile 0.5 OProfile OProfile 0.4 OProfile OProfile 0.3 OProfile OProfile 0.2 OProfile OProfile 0.1
Not Vulnerable:

OProfile OPControl Path Specification Local Privilege Escalation Vulnerability

OProfile is prone to a privilege-escalation vulnerability. The application attempts to execute commands without properly specifying the executable's location.

This issue allows local attackers to execute arbitrary commands. If the vulnerable script is executable via privilege-escalation utilities such as 'sudo', attackers may exploit this issue to execute arbitrary code with superuser privileges.

OProfile OPControl Path Specification Local Privilege Escalation Vulnerability

An exploit is not required.

OProfile OPControl Path Specification Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OProfile OPControl Path Specification Local Privilege Escalation Vulnerability

References:

• OProfile Home Page (OProfile)
  
• Arbitrary code execution via OProfile (Luis Miguel Silva )