CVE-2011-2472: Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users...

Security readout for executives and security teams

CVE-2011-2472 is a local file overwrite issue in OProfile's opcontrol utility. A local user may be able to abuse path traversal in the save/session arguments to write outside the intended session directory. This is mainly a privilege-boundary risk where untrusted users can run opcontrol, especially through sudo. Exposure is most likely on systems with OProfile 0.9.6 or earlier where local users can run opcontrol. Risk increases if sudoers or administrative workflows allow non-root users to invoke opcontrol. The provided source data does not identify remote attack exposure. Treat as a targeted local privilege-risk item, not an internet-wide emergency. Prioritize shared servers, developer systems, and legacy Linux hosts where users have shell access or delegated opcontrol permissions. Mitigation focus: Inventory OProfile installations and identify versions at or below 0.9.6.; Check Debian, Ubuntu, Red Hat, or other vendor guidance for fixed OProfile packages.; Restrict sudo or delegated access to opcontrol until systems are remediated..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.