CVE-2011-3632: High severity centos hardlink vulnerability
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.
Other sources
It was reported, that hardlink, the tool for consolidation of duplicate files via hardlinks operated on full file system objects path names. A local attacker could use this flaw to conduct symlink attacks (cause the hardlink executable to operate on directories / files outside of the intended directory tree).
References: [1] http://www.openwall.com/lists/oss-security/2011/10/15/2 [2] https://bugs.gentoo.org/showbug.cgi?id=387269 [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
Proposed patch (applied by the Owl Linux distribution): [Adds section BUGS into the hardlink(1) man page documenting the danger] [4] http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/hardlink/hardlink.1.diff?r1=1.1;r2=1.2
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3632?
CVE-2011-3632 is a local vulnerability that poses a medium threat level, allowing attackers to conduct symlink attacks.
How do I fix CVE-2011-3632?
To address CVE-2011-3632, update the hardlink package to version 0.3.2 or later.
Which software versions are affected by CVE-2011-3632?
CVE-2011-3632 affects hardlink versions prior to 0.1.2, as well as specific versions of Red Hat and Debian Linux distributions.
Can CVE-2011-3632 be exploited remotely?
CVE-2011-3632 requires local access for exploitation, making it a local vulnerability.
What kind of attack does CVE-2011-3632 enable?
CVE-2011-3632 allows local attackers to perform symlink attacks, potentially leading to unauthorized access to files.