CVE-2011-3632

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

• CWE-59

• https://access.redhat.com/security/cve/cve-2011-3632Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3632Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/15/2Exploit, Mailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/20/6Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2011-3632Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3632Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/15/2Exploit, Mailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/10/20/6Mailing List, Third Party Advisory

Published

Nov 26, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3626Double free vulnerability in the prepare_exec function in sr…
• CVE-2011-3627The bytecode engine in ClamAV before 0.97.3 allows remote at…
• CVE-2011-3628Untrusted search path vulnerability in pam_motd (aka the MOT…
• CVE-2011-3629Joomla! core 1.7.1 allows information disclosure due to weak…7.5
• CVE-2011-3630Hardlink before 0.1.2 suffer from multiple stack-based buffe…8.8
• CVE-2011-3631Hardlink before 0.1.2 has multiple integer overflows leading…8.8
• CVE-2011-3633Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-3634methods/https.cc in apt before 0.8.11 accepts connections wh…
• CVE-2011-3635Cross-site scripting (XSS) vulnerability in the theme_adium_…
• CVE-2011-3636Cross-site request forgery (CSRF) vulnerability in the manag…
• CVE-2011-3637The m_stop function in fs/proc/task_mmu.c in the Linux kerne…5.5
• CVE-2011-3638fs/ext4/extents.c in the Linux kernel before 3.0 does not ma…