Directory Traversal Vulnerability in radvd Package Allows File Overwrites
Summary
DEBIAN-CVE-2011-3602: Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. Affects radvd versions < 1:1.8-1.1. Fixed in 1:1.8-1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The radvd (Router Advertisement Daemon) is a crucial component in IPv6 networking, responsible for sending router advertisements to enable devices to configure their own IP addresses. It is widely used in various Debian distributions to facilitate network communication. However, a vulnerability has been identified in versions prior to 1.8.2, which exposes the system to potential file overwrite attacks due to improper handling of interface names.
Vulnerability Detail
The vulnerability, identified as CVE-2011-3602, arises from a directory traversal flaw in the device-linux.c file of the radvd package. This flaw allows local users to overwrite arbitrary files and enables remote attackers to exploit the vulnerability via crafted interface names that include '..' (dot dot) sequences. This can lead to unauthorized access and manipulation of critical system files, posing significant security risks.
How To Fix
Minimum fixed version
1:1.8-1.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade radvdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict access to the radvd service or implement strict input validation to prevent the use of malicious interface names. Additionally, monitoring logs for unusual activity can help mitigate potential exploitation.
Conclusion
The directory traversal vulnerability in the radvd package poses significant security risks, allowing unauthorized file overwrites. It is crucial to update to the patched version to safeguard your system. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for radvd →
FAQ
CVE-2011-3602 is a directory traversal vulnerability in the radvd package that allows file overwrites through crafted interface names.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The risks include unauthorized file access and manipulation, which can lead to system compromise and data loss.
Yes, the vulnerability is patched in version 1:1.8-1.1 of the radvd package. It is recommended to update to this version or later.
If immediate updating is not possible, consider implementing strict input validation and monitoring for unusual activity as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for radvd.
