VULNERABILITY INTELLIGENCE
CVE-2011-3204
CVSS score3.3 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2011-09-06
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:P/A:P
Description
hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hammer.log (aka the HH_LOG file) or (2) the REPORT_LOG file.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')