CVE-2011-3602
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd)...
CVE-2011-3602 is a medium vulnerability (CVSS 6.4) in Litech Router Advertisement Daemon, published October 26, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.85%, the 86th percentile. Fixed in radvd 1:1.8-1.1.
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
CVE-2011-3602- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
CVE-2011-3602- Updated
- 2026-11-02
EUVDEUVD-2011-3561 No score
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
EUVD-2011-3561- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jxfr-4vcf-h5vv No score
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd)...
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
GHSA-jxfr-4vcf-h5vv- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
CVE-2011-3602- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3602 No score
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
- Record
DEBIAN-CVE-2011-3602- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10558-1 No score
radvd-2.11-1.7 on GA media
These are all security issues fixed in the radvd-2.11-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10558-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
radvdDebian:12 |
before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:13 |
before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:14 |
before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:6.0 |
before 1:1.6-1.1, plus listed versions 1:1.6-1 |
1:1.6-1.1 |
radvdDebian:5.0 |
before 1:1.1-3.1, plus listed versions 1:1.1-3 |
1:1.1-3.1 |
radvdopenSUSE:Tumbleweed |
before 2.11-1.7 | 2.11-1.7 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2011/10/06/3
debian.org/security/2011/dsa-2323
github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc
litech.org/radvd/CHANGES
ubuntu.com/usn/USN-1257-1
nvd.nist.gov/vuln/detail/CVE-2011-3602
security-tracker.debian.org/tracker/CVE-2011-3602
suse.com/security/cve/CVE-2011-3602