Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-3602
HistoryOct 07, 2011 - 12:00 a.m.

CVE-2011-3602

2011-10-0700:00:00
ubuntu.com
ubuntu.com
5

0.004 Low

EPSS

Percentile

73.2%

Directory traversal vulnerability in device-linux.c in the router
advertisement daemon (radvd) before 1.8.2 allows local users to overwrite
arbitrary files, and remote attackers to overwrite certain files, via a …
(dot dot) in an interface name. NOTE: this can be leveraged with a symlink
to overwrite arbitrary files.

Notes

Author Note
mdeslaur upstream patch may be incorrect, see http://www.openwall.com/lists/oss-security/2011/10/07/4 issue was actually fixed in 1.8.3 because of incorrect patch
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchradvd< 1:1.3-1.1ubuntu0.1UNKNOWN
ubuntu10.10noarchradvd< 1:1.6-1ubuntu0.1UNKNOWN
ubuntu11.04noarchradvd< 1:1.7-1ubuntu0.1UNKNOWN
ubuntu11.10noarchradvd< 1:1.8-1ubuntu0.1UNKNOWN