[ GLSA 201111-08 ] radvd: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: radvd: Multiple vulnerabilities (GLSA 201111-08)
Severity: high
Exploitable: local, remote
Date: November 20, 2011
Bug(s): #385967
ID: 201111-08

Synopsis

Multiple vulnerabilities have been found in radvd which could
potentially lead to privilege escalation, data loss, or a Denial of
Service.


Background

radvd is an IPv6 router advertisement daemon for Linux and BSD.

Affected Packages

Package: net-misc/radvd
Vulnerable: < 1.8.2
Unaffected: >= 1.8.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in radvd. Please review
the CVE identifiers referenced below for details.


Impact

A remote unauthenticated attacker may be able to gain escalated
privileges, escalate the privileges of the radvd process, overwrite files
with specific names, or cause a Denial of Service. Local attackers may be
able to overwrite the contents of arbitrary files using symlinks.


Workaround

There is no known workaround at this time.

Resolution

All radvd users should upgrade to the latest stable version: