Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2303-1 | linux-2.6 security update |
Debian DSA |
DSA-2303-2 | New linux-2.6 packages fix regression |
EUVD |
EUVD-2011-2878 | Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory. |
Ubuntu USN |
USN-1239-1 | Linux kernel (EC2) vulnerabilities |
Ubuntu USN |
USN-1240-1 | Linux kernel (Marvell DOVE) vulnerabilities |
Ubuntu USN |
USN-1241-1 | Linux kernel (i.MX51) vulnerabilities |
Ubuntu USN |
USN-1242-1 | Linux kernel (Maverick backport) vulnerabilities |
Ubuntu USN |
USN-1243-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1244-1 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-1245-1 | Linux kernel (Marvell DOVE) vulnerabilities |
Ubuntu USN |
USN-1253-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1279-1 | Linux (Natty backport) vulnerabilities |
Ubuntu USN |
USN-1281-1 | Linux (OMAP4) vulnerabilities |
Ubuntu USN |
USN-1285-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T23:15:31.654Z
Reserved: 2011-07-27T00:00:00Z
Link: CVE-2011-2905
No data.
Status : Deferred
Published: 2013-03-01T12:37:53.990
Modified: 2025-04-11T00:51:21.963
Link: CVE-2011-2905
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN