CVE-2011-3630

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.

• CWE-787

• https://access.redhat.com/security/cve/cve-2011-3630Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630Issue Tracking, Patch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3630Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/20/6Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2011-3630Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630Issue Tracking, Patch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3630Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/20/6Mailing List, Third Party Advisory

Published

Nov 26, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3624Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.…5.3
• CVE-2011-3625Stack-based buffer overflow in the sub_read_line_sami functi…
• CVE-2011-3626Double free vulnerability in the prepare_exec function in sr…
• CVE-2011-3627The bytecode engine in ClamAV before 0.97.3 allows remote at…
• CVE-2011-3628Untrusted search path vulnerability in pam_motd (aka the MOT…
• CVE-2011-3629Joomla! core 1.7.1 allows information disclosure due to weak…7.5
• CVE-2011-3631Hardlink before 0.1.2 has multiple integer overflows leading…8.8
• CVE-2011-3632Hardlink before 0.1.2 operates on full file system objects p…7.1
• CVE-2011-3633Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-3634methods/https.cc in apt before 0.8.11 accepts connections wh…
• CVE-2011-3635Cross-site scripting (XSS) vulnerability in the theme_adium_…
• CVE-2011-3636Cross-site request forgery (CSRF) vulnerability in the manag…