CVE:CVE-2011-2473
CNNVD:CNNVD-201106-106
OProfile 0.9.6及早期版本的utils/opcontrol中的do_dump_data函数中存在漏洞。本地用户可以借助与opd_pipe文件上的符号链接攻击相关联的特制--session-dir参数，创建或者重写任意文件。
solution:Upgrade maynard_johnson oprofile to a higher version than 0.9.6,0.1,0.2,0.3,0.4,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,and avoid the version (,0.9.6],0.1,0.2,0.3,0.4,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5