fkie_cve-2011-1784
Vulnerability from fkie_nvd
Published
2011-05-20 22:55
Modified
2025-04-11 00:51
Severity ?
Summary
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2556FCA0-2590-424E-9A79-867164153E6E",
"versionEndIncluding": "1.2.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FAF523F2-D9A6-432D-A7D9-A50FA79C26C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8FA9238F-D69D-473B-A104-47D8BA33D5DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AAB00A40-B543-405B-B28C-836F0C6E7F04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B370AC9F-7B1B-4473-8034-38867C7C2A58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "41D04C30-FF47-474B-9398-144F0BD074A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "01B2EED4-1A05-43FE-84BB-A346E712E3F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B71E052F-AC0C-4976-B433-3299B4E3A6D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*",
"matchCriteriaId": "B7C7D639-9B18-4217-9192-73D34D14FD0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "29CA469F-A2C8-4BE7-9C94-FDF1892C15DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*",
"matchCriteriaId": "CF26EB0B-8A82-4EB2-A7F7-57A82FBADD72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*",
"matchCriteriaId": "8742E6FD-8F67-4EEE-B415-8A0E0508AADA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8A7F6776-CA88-4573-B9FE-976114C0E2F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0EB667C6-DDC3-4D4F-AA6C-B014CC3866E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "DEF5D572-7637-4348-81D4-D0BB33E19FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "2DF99A64-2885-4BCF-9563-D6C667642BBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "175E0321-5E10-4C26-A559-026AFFA86353",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*",
"matchCriteriaId": "AC9512F9-2900-4445-8027-2349DD9D0EF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7D202340-9154-49B2-AF41-6D4BC366D29F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5403A412-60FF-4FFD-B58E-A9349A53CD75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "62973329-4CE3-4BFD-8787-5964BDD3DA7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2AEA2DA6-DDB5-4821-ABD0-1C41AC40B36F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "828B15F2-69EB-4D78-93F6-F46D3FE0853B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "178A1EE6-2DA8-48B8-B86D-8F2905B98E35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1B835C3B-D5A6-4B0E-8EC0-BDAB8A8A8B1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9AAF52F0-8479-4F01-A954-8BDF1B02FD77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*",
"matchCriteriaId": "24424629-3EFC-42F0-A0F4-FDB838579F52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "C0B9003D-9824-4FEE-B752-5BFA46CD8407",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "645E15DC-A3CC-4EC1-A6BC-2A11F5326E6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E7D6A830-2D76-4113-87CA-66F4E0D25BC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1562A45C-E100-4B92-B500-1C66D6A51561",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD16143-ABB7-46F7-A383-9760DCB0D6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "013C7056-6842-485C-BB83-2C1411AF4539",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "07C8E0C2-8622-4436-8D45-734322676F07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69B97CC0-232E-4389-A099-2CD4CC86C1F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "22300323-06D6-404A-B10F-85B34A05DFC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89ACDC55-8AD0-43C2-A5B4-5FCC19A909D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3356A7B3-9A8B-4C8C-93FB-CB4796C05629",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A76BC438-7E36-4C98-94B9-507BDA393BB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "CDA4BFCC-D573-4AC3-82E4-2F940970DC29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7B7C8FF4-C8F7-4155-806C-A83F6750B05E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "223AC16F-8B70-4E55-A01B-A6012532CB8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "6F945C6D-ADE0-4077-B8EF-A6CCB0B4B761",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "F3099373-E05A-4DF0-88D8-2B73F716B578",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*",
"matchCriteriaId": "AA9480E7-B7DB-47C5-9CFD-38ED9E0A2454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*",
"matchCriteriaId": "FC6D1E5C-4906-4D8F-84CE-B131658D3242",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*",
"matchCriteriaId": "53D59BB9-26D8-43E7-BA7C-0BFDC4C8AEB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*",
"matchCriteriaId": "7D25A1C7-E02F-4F6B-B553-A559CC235E9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*",
"matchCriteriaId": "D1886BCB-E5A5-4897-B486-B8AA5560A2B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*",
"matchCriteriaId": "BDA0C618-30D4-41BB-96AB-DD4D9B4D4085",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*",
"matchCriteriaId": "0B852D87-A732-448A-8A56-93E45FD1AA07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*",
"matchCriteriaId": "BF70E5AB-28E5-4968-95A2-F1E8540983A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "4F070102-D4C2-4155-A587-7E6CC20508C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*",
"matchCriteriaId": "C029FE04-EE97-4D69-B095-75D96F1DEF2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*",
"matchCriteriaId": "3C89BA5B-BF3A-43B3-828C-33721FAF7DDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0FBE0275-1FB8-433A-AE8F-E3A570249AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB7DCD5-726F-48BF-BFD4-CCB7380C0EAC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."
},
{
"lang": "es",
"value": "La funci\u00f3n pidfile_write en core/pidfile.c en keepalived v1.2.2 y versiones anteriores utiliza permisos 0666 permisos para (1) keepalived.pid, (2) checkers.pid, y (3) archivos vrrp.pid en /var/run/, lo que permite a usuarios locales matar procesos de su elecci\u00f3n escribiendo un PID en uno de estos archivos."
}
],
"id": "CVE-2011-1784",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-05-20T22:55:04.970",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "secalert@redhat.com",
"url": "http://www.osvdb.org/72380"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.osvdb.org/72380"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…