CVE-2011-3602: Litech Router Advertisement Daemon

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.

Affected products

• Litech Router Advertisement Daemon: up to and including 1.8.1

Published 2014-04-27. Last modified 2026-06-16.