CVE-2011-2684

foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908dfsg-5.1+squeeze0 as packaged in Debian squeeze create temporary files insecurely, which allows local users to write over arbitrary files via a symlink attack on /tmp/foo2zjs.

• CWE-59

• http://www.openwall.com/lists/oss-security/2011/07/06/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/08/5Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633870Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/foo2zjs/+bug/805370Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2684/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/07/06/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/08/5Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633870Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/foo2zjs/+bug/805370Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2684/Third Party Advisory

Published

Oct 23, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2678The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Win…
• CVE-2011-2679Cross-site scripting (XSS) vulnerability in IBM Rational DOO…
• CVE-2011-2680Unspecified vulnerability in IBM Rational DOORS Web Access 1…
• CVE-2011-2681IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not …
• CVE-2011-2682The Login component in IBM Rational DOORS Web Access 1.4.x b…
• CVE-2011-2683reseed seeds random numbers from an insecure HTTP request to…
• CVE-2011-2685Stack-based buffer overflow in the Lotus Word Pro import fil…
• CVE-2011-2686Ruby before 1.8.7-p352 does not reset the random seed upon f…
• CVE-2011-2687Drupal 7.x before 7.3 allows remote attackers to bypass inte…
• CVE-2011-2688SQL injection vulnerability in mysql/mysql-auth.pl in the mo…
• CVE-2011-2689The gfs2_fallocate function in fs/gfs2/file.c in the Linux k…
• CVE-2011-2690Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before …8.8