CVE-2011-1784 The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local...
LowCVSS 3.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| keepalived | <= 1.2.2 | No fix listed |
| keepalived | = 0.2.1 | No fix listed |
| keepalived | = 0.2.3 | No fix listed |
| keepalived | = 0.2.6 | No fix listed |
| keepalived | = 0.2.7 | No fix listed |
| keepalived | = 0.3.5 | No fix listed |
| keepalived | = 0.3.6 | No fix listed |
| keepalived | = 0.3.7 | No fix listed |
| keepalived | = 0.3.8 | No fix listed |
| keepalived | = 0.4.8 | No fix listed |
| keepalived | = 0.4.9 | No fix listed |
| keepalived | = 0.4.9a | No fix listed |
| keepalived | = 0.5.3 | No fix listed |
| keepalived | = 0.5.5 | No fix listed |
| keepalived | = 0.5.6 | No fix listed |
| keepalived | = 0.5.7 | No fix listed |
| keepalived | = 0.5.8 | No fix listed |
| keepalived | = 0.5.9 | No fix listed |
| keepalived | = 0.6.1 | No fix listed |
| keepalived | = 0.6.2 | No fix listed |
| keepalived | = 0.6.3 | No fix listed |
| keepalived | = 0.6.4 | No fix listed |
| keepalived | = 0.6.5 | No fix listed |
| keepalived | = 0.6.6 | No fix listed |
| keepalived | = 0.6.7 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| keepalived | = 0.6.8 | No fix listed |
| keepalived | = 0.6.9 | No fix listed |
| keepalived | = 0.6.10 | No fix listed |
| keepalived | = 0.7.1 | No fix listed |
| keepalived | = 0.7.6 | No fix listed |
| keepalived | = 1.0.0 | No fix listed |
| keepalived | = 1.0.1 | No fix listed |
| keepalived | = 1.0.2 | No fix listed |
| keepalived | = 1.0.3 | No fix listed |
| keepalived | = 1.1.0 | No fix listed |
| keepalived | = 1.1.1 | No fix listed |
| keepalived | = 1.1.2 | No fix listed |
| keepalived | = 1.1.3 | No fix listed |
| keepalived | = 1.1.4 | No fix listed |
| keepalived | = 1.1.5 | No fix listed |
| keepalived | = 1.1.6 | No fix listed |
| keepalived | = 1.1.7 | No fix listed |
| keepalived | = 1.1.8 | No fix listed |
| keepalived | = 1.1.9 | No fix listed |
| keepalived | = 1.1.10 | No fix listed |
| keepalived | = 1.1.11 | No fix listed |
| keepalived | = 1.1.12 | No fix listed |
| keepalived | = 1.1.13 | No fix listed |
| keepalived | = 1.1.14 | No fix listed |
| keepalived | = 1.1.15 | No fix listed |
| keepalived | = 1.1.16 | No fix listed |
| keepalived | = 1.1.17 | No fix listed |
| keepalived | = 1.1.18 | No fix listed |
| keepalived | = 1.1.19 | No fix listed |
| keepalived | = 1.1.20 | No fix listed |
| keepalived | = 1.2.0 | No fix listed |
| keepalived | = 1.2.1 | No fix listed |
| debian/keepalived(Debian:12) | < 1:1.2.2-2 | 1:1.2.2-2 |
| debian/keepalived(Debian:13) | < 1:1.2.2-2 | 1:1.2.2-2 |
| debian/keepalived(Debian:14) | < 1:1.2.2-2 | 1:1.2.2-2 |
References
- bugs.debian.org
- [debian-security] 20110510 World writable pid and lock files. mailing-list
- [debian-security] 20110510 Re: World writable pid and lock files. mailing-list
- [debian-security] 20110511 Re: World writable pid and lock files. mailing-list
- [oss-security] 20110510 CVE request: keepalived pid file permissions issue mailing-list
- [oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue mailing-list
- 44460 third-party-advisory vendor-advisory
- 72380 vdb-entry
- 47859 vdb-entry
- bugzilla.redhat.com
- keepalived-pid-dos(67477) vdb-entry
- Debian Security Tracker CVE-2011-1784 vendor-advisory
- bugs.debian.org issue-tracking