CVE-2011-3602

Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.

• CWE-22

• http://www.debian.org/security/2011/dsa-2323
• http://www.litech.org/radvd/CHANGES
• http://www.openwall.com/lists/oss-security/2011/10/06/3
• http://www.ubuntu.com/usn/USN-1257-1Vendor Advisory
• https://github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc
• http://www.debian.org/security/2011/dsa-2323
• http://www.litech.org/radvd/CHANGES
• http://www.openwall.com/lists/oss-security/2011/10/06/3
• http://www.ubuntu.com/usn/USN-1257-1Vendor Advisory
• https://github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc

Published

Apr 27, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3596Polipo before 1.0.4.1 suffers from a DoD vulnerability via s…7.5
• CVE-2011-3597Eval injection vulnerability in the Digest module before 1.1…
• CVE-2011-3598Multiple cross-site scripting (XSS) vulnerabilities in phpPg…
• CVE-2011-3599The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for P…
• CVE-2011-3600The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event…7.5
• CVE-2011-3601Buffer overflow in the process_ra function in the router adv…
• CVE-2011-3603The router advertisement daemon (radvd) before 1.8.2 does no…
• CVE-2011-3604The process_ra function in the router advertisement daemon (…
• CVE-2011-3605The process_rs function in the router advertisement daemon (…
• CVE-2011-3606A DOM based cross-site scripting flaw was found in the JBoss…5.4
• CVE-2011-3607Integer overflow in the ap_pregsub function in server/util.c…
• CVE-2011-3608Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…