CVE-2011-2471: High – utils/opcontrol in OProfile 0.9.6 and earlier might allow local users

CWE Weakness Definitions

CWE-264: Permissions, Privileges, and Access Controls

Broad class covering failures in permission enforcement. Deprecated in favor of CWE-284, CWE-862, CWE-863.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2011. A high severity vulnerability affects Maynard Johnson systems (CVE-2011-2471). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2011-GLOBAL-088267-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2011-2471?

This vulnerability was disclosed in 2011. A high severity vulnerability affects Maynard Johnson systems (CVE-2011-2471). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2011-2471?

CVE-2011-2471 has CVSS 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. EPSS: 0.5%.

Is CVE-2011-2471 actively exploited?

No confirmed active exploitation of CVE-2011-2471 as of 2026-05-30.

How do I remediate CVE-2011-2471?

Priority: MEDIUM.

What systems are affected by CVE-2011-2471?

CVE-2011-2471 affects Maynard Johnson Oprofile.

Vulnerability Details

CVE ID	`CVE-2011-2471`
BSID	`BS-2011-GLOBAL-088267-H` BreachSpider Global ID
CVSS Vector	`AV:L/AC:L/Au:N/C:C/I:C/A:C`
Published	2011-06-09
Last Modified	2026-04-29
ICS Relevance	0%
Weakness (CWE)	Permissions, Privileges, and Access Controls
Source	NVD

Official Description

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760. CVSS vector: AV:L/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: MINIMAL

Affected Products

Vendor	Product	Affected Versions
Maynard Johnson	Oprofile	`≤ 0.9.6`

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 5607 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`b4c1c3d3fe9270de8dda944ca5d15d5116004871f2ab0d4f598bd087fc0237014aa5b0520ba64be5c72048afcf290acece821d2710546e40a5df36cc5889df20`

Related CVEs affecting Maynard Johnson

CVE-2006-0576 7.2 Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlie... CVE-2011-1760 7.2 utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to cond... CVE-2011-2472 6.3 Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and ea... CVE-2011-2473 6.3 The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier mi...

View all Maynard Johnson CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →