CVE-2011-3632

Опубликовано: 26 нояб. 2019

Источник: nvd

CVSS3: 7.1

CVSS2: 3.6

EPSS Низкий

Описание

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

Ссылки

https://access.redhat.com/security/cve/cve-2011-3632
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632
Issue Tracking
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-3632
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/10/15/2
Exploit
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/10/20/6
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2011-3632
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632
Issue Tracking
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-3632
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/10/15/2
Exploit
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/10/20/6
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hardlink_project:hardlink:*:*:*:*:*:*:*:*

Версия до 0.1.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00132

Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2011-3632

CVSS3: 7.1

ubuntu

около 6 лет назад

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

CVE-2011-3632

redhat

больше 14 лет назад

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

CVE-2011-3632

CVSS3: 7.1

debian

около 6 лет назад

Hardlink before 0.1.2 operates on full file system objects path names ...

GHSA-98h5-28mw-xjrq

CVSS3: 7.1

github

почти 4 года назад

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

EPSS

Процентиль: 33%

0.00132

Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-59