CVE:CVE-2011-3632
CNNVD:CNNVD-201111-447
Hardlink是一种硬链接技术。
Hardlink 0.1.2之前版本中存在后置链接漏洞。本地攻击者可利用该漏洞实施符号链接攻击。
solution:Upgrade hardlink_project hardlink to a higher version than 0.1.2,and avoid the version (,0.1.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0