Back to search
CVE-2011-1784
Published: May 20, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
keepalived-pid-dos(67477)
vdb-entry
x_refsource_XF
[debian-security] 20110511 Re: World writable pid and lock files.
mailing-list
x_refsource_MLIST
[debian-security] 20110510 World writable pid and lock files.
mailing-list
x_refsource_MLIST
[oss-security] 20110510 CVE request: keepalived pid file permissions issue
mailing-list
x_refsource_MLIST
47859
vdb-entry
x_refsource_BID
72380
vdb-entry
x_refsource_OSVDB
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281
x_refsource_CONFIRM
44460
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=704039
x_refsource_CONFIRM
[debian-security] 20110510 Re: World writable pid and lock files.
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now