CVE-2011-3204

The CVE-2011-3204 entry concerns hammerhead.cc in Hammerhead 2.1.4. A local attacker can exploit a symlink vulnerability to write to arbitrary files via two logging paths: the HH_LOG file (/tmp/hammer.log) and the REPORT_LOG file. The underlying issue is a symlink attack that permits unprivileged...