Directory Traversal Vulnerability in radvd Package - CVE-2011-3602
Summary
CVE-2011-3602: Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. Affects radvd versions < 1:1.8-1.1. Fixed in 1:1.8-1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The radvd (Router Advertisement Daemon) package is a critical component in networking that facilitates the automatic configuration of IPv6 addresses on local networks. It listens for router advertisements and responds accordingly, making it essential for seamless network connectivity. However, prior to version 1.8.2, radvd is susceptible to a directory traversal vulnerability that can be exploited by both local and remote attackers.
Vulnerability Detail
CVE-2011-3602 is a directory traversal vulnerability found in device-linux.c of the radvd package before version 1.8.2. This vulnerability allows local users to overwrite arbitrary files and remote attackers to overwrite specific files by manipulating the interface name with a '..' (dot dot) sequence. The potential ramifications include unauthorized file access and modification, which could compromise system integrity and security. The vulnerability can be exploited through symlinks, allowing attackers to target sensitive files.
How To Fix
Minimum fixed version
1:1.8-1.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade radvdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the radvd service or implement file system permissions that prevent unauthorized users from exploiting the directory traversal vulnerability. Additionally, monitoring logs for unusual activity may help mitigate potential attacks until the package is updated.
Conclusion
CVE-2011-3602 represents a significant security risk for systems using the radvd package prior to version 1.8.2. It is crucial for users to upgrade their installations to mitigate this vulnerability and protect their systems from potential exploitation.
See every vulnerability recorded for radvd →
FAQ
CVE-2011-3602 is a directory traversal vulnerability in the radvd package that allows attackers to overwrite files on the system.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which analyzes your manifest file for vulnerabilities.
Not fixing this vulnerability can lead to unauthorized file access, potential data loss, and compromise of system security.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software without requiring code access or installation.
If an immediate upgrade is not possible, implement strict file permissions and monitor system logs for any suspicious activity as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for radvd.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.