CVE-2011-3630 Information

Description

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it leading to hardlink executable crash or potentially arbitrary code execution with the privileges of the user running the hardlink executable.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Reference

https://access.redhat.com/security/cve/cve-2011-3630 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 https://security-tracker.debian.org/tracker/CVE-2011-3630 https://www.openwall.com/lists/oss-security/2011/10/20/6

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8