RedhatCVELIST:CVE-2011-3632

HistoryNov 26, 2019 - 3:34 a.m.

CVE-2011-3632

2019-11-2603:34:46

redhat

www.cve.org

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

CNA Affected

[
  {
    "product": "hardlink",
    "vendor": "hardlink",
    "versions": [
      {
        "status": "affected",
        "version": "before 0.1.2"
      }
    ]
  }
]

References

access.redhat.com/security/cve/cve-2011-3632

bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516

bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632

security-tracker.debian.org/tracker/CVE-2011-3632

www.openwall.com/lists/oss-security/2011/10/15/2

www.openwall.com/lists/oss-security/2011/10/20/6