CVE-2011-3630: Buffer Overflow
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
Other sources
Multiple stack-based buffer overflow flaws were found in the way hardlink, the tool for consolidation of duplicate files via hardlinks, processed directory trees with deeply nested directories. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
References: [1] http://www.openwall.com/lists/oss-security/2011/10/15/2 [2] https://bugs.gentoo.org/showbug.cgi?id=387269 [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
Proposed patch (applied by the Owl Linux distribution): [4] http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/hardlink/hardlink.c.diff?r1=1.1;r2=1.2
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3630?
CVE-2011-3630 is classified as a high severity vulnerability due to the risk of remote code execution.
How do I fix CVE-2011-3630?
To fix CVE-2011-3630, upgrade to hardlink version 0.3.2 or later.
What software is affected by CVE-2011-3630?
CVE-2011-3630 affects versions of the hardlink software prior to 0.1.2 and certain distributions of Red Hat and Debian.
Can CVE-2011-3630 be exploited remotely?
Yes, CVE-2011-3630 can be exploited remotely by a malicious attacker providing a specially-crafted directory tree.
What type of vulnerability is CVE-2011-3630?
CVE-2011-3630 is a stack-based buffer overflow vulnerability.