CVE-2011-3204: Geoff Wong Hammerhead

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hammer.log (aka the HH_LOG file) or (2) the REPORT_LOG file.

Affected products

• Geoff Wong Hammerhead: version 2.1.4 only

Published 2011-09-06. Last modified 2026-06-16.