Beveiligingsadvies

CVE-2011-3602

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-04-27 21:00:00
Laatst bijgewerkt 2024-08-06 23:37:48
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.