Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the     way string lengths concatenation is done in the calculation of the required memory space to be used. A     remote attacker could provide a specially-crafted directory tree and trick the local user into     consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user     privileges. (CVE-2011-3631)

Note that Nessus relies on the presence of the package as reported by the vendor.

fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
217529	Linux Distros Unpatched Vulnerability : CVE-2011-3631	Nessus	Misc.	high
57069	Fedora 15 : hardlink-1.0-12.fc15 (2011-14753)	Nessus	Fedora Local Security Checks	medium
56933	Fedora 16 : hardlink-1.0-12.fc16 (2011-14727)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2011-3631

high

Tenable Plugins

high

medium

medium