EDB-35681

functional

OProfile 0.9.6 - 'opcontrol' Utility 'set_event()' Local Privilege Escalation

view exploit source exploit_dbverifiedtype localauthor Stephane Chauveaupublished 2011-04-29catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2011-1760UShigh7.2Exploit
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan