VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 8, 2006· Updated Apr 16, 2026

CVE-2006-0576

CVE-2006-0576

Description

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.

Affected products

18
  • Maynard Johnson/Oprofile18 versions
    cpe:2.3:a:maynard_johnson:oprofile:*:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:maynard_johnson:oprofile:*:*:*:*:*:*:*:*range: <=0.9.1
    • cpe:2.3:a:maynard_johnson:oprofile:0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:maynard_johnson:oprofile:0.9:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.