Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-3630

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.

Published

2019-11-26T04:15:10.937

Last Modified

2024-11-21T01:30:53.093

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	hardlink_project	hardlink	< 0.1.2	Yes
Operating System	debian	debian_linux	8.0	Yes
Operating System	debian	debian_linux	9.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	redhat	enterprise_linux	5.0	Yes
Operating System	redhat	enterprise_linux	6.0	Yes

References

https://access.redhat.com/security/cve/cve-2011-3630 Third Party Advisory ([email protected])
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 Issue Tracking, Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://security-tracker.debian.org/tracker/CVE-2011-3630 Third Party Advisory ([email protected])
https://www.openwall.com/lists/oss-security/2011/10/20/6 Mailing List, Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/cve-2011-3630 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security-tracker.debian.org/tracker/CVE-2011-3630 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2011/10/20/6 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)