CVE-2006-0576

Publication date 8 February 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
oprofile 7.04 feisty
Fixed 0.9.2-1
6.10 edgy
Fixed 0.9.2-1
6.06 LTS dapper
Fixed 0.9.1-8ubuntu0.1