Security Advisory

CVE-2011-3602

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-27 21:00:00
Last updated 2024-08-06 23:37:48
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.