CVE-2011-3603

Published: Apr 27, 2014Modified: May 6, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an unspecified impact.

Affected (1)

Products: Litech: Router Advertisement Daemon

Litech

1 product

Router Advertisement Daemon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Litech Router Advertisement Daemon	Up to 1.8.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.litech.org/radvd/CHANGES

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/10/06/3

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2011-3603

Source: secalert@redhat.com

http://www.litech.org/radvd/CHANGES

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/10/06/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/security/cve/CVE-2011-3603

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.