{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-05-10T00:00:00", "descriptions": [{"lang": "en", "value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "keepalived-pid-dos(67477)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"}, {"name": "[debian-security] 20110511 Re: World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"}, {"name": "[debian-security] 20110510 World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"}, {"name": "[oss-security] 20110510 CVE request: keepalived pid file permissions issue", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2011/05/10/5"}, {"name": "47859", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/47859"}, {"name": "72380", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/72380"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"}, {"name": "44460", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/44460"}, {"name": "[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2011/05/16/7"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"}, {"name": "[debian-security] 20110510 Re: World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:37:25.695Z"}, "title": "CVE Program Container", "references": [{"name": "keepalived-pid-dos(67477)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"}, {"name": "[debian-security] 20110511 Re: World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"}, {"name": "[debian-security] 20110510 World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"}, {"name": "[oss-security] 20110510 CVE request: keepalived pid file permissions issue", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2011/05/10/5"}, {"name": "47859", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/47859"}, {"name": "72380", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/72380"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"}, {"name": "44460", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/44460"}, {"name": "[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2011/05/16/7"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"}, {"name": "[debian-security] 20110510 Re: World writable pid and lock files.", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2011-1784", "datePublished": "2011-05-20T22:00:00", "dateReserved": "2011-04-19T00:00:00", "dateUpdated": "2024-08-06T22:37:25.695Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*", "matchCriteriaId": "2556FCA0-2590-424E-9A79-867164153E6E", "versionEndIncluding": "1.2.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "FAF523F2-D9A6-432D-A7D9-A50FA79C26C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "8FA9238F-D69D-473B-A104-47D8BA33D5DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "AAB00A40-B543-405B-B28C-836F0C6E7F04", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "B370AC9F-7B1B-4473-8034-38867C7C2A58", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "41D04C30-FF47-474B-9398-144F0BD074A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "01B2EED4-1A05-43FE-84BB-A346E712E3F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "B71E052F-AC0C-4976-B433-3299B4E3A6D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "B7C7D639-9B18-4217-9192-73D34D14FD0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "29CA469F-A2C8-4BE7-9C94-FDF1892C15DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "CF26EB0B-8A82-4EB2-A7F7-57A82FBADD72", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*", "matchCriteriaId": "8742E6FD-8F67-4EEE-B415-8A0E0508AADA", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "8A7F6776-CA88-4573-B9FE-976114C0E2F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "0EB667C6-DDC3-4D4F-AA6C-B014CC3866E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "DEF5D572-7637-4348-81D4-D0BB33E19FBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "2DF99A64-2885-4BCF-9563-D6C667642BBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*", "matchCriteriaId": "175E0321-5E10-4C26-A559-026AFFA86353", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*", "matchCriteriaId": "AC9512F9-2900-4445-8027-2349DD9D0EF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "7D202340-9154-49B2-AF41-6D4BC366D29F", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "5403A412-60FF-4FFD-B58E-A9349A53CD75", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "62973329-4CE3-4BFD-8787-5964BDD3DA7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "2AEA2DA6-DDB5-4821-ABD0-1C41AC40B36F", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "828B15F2-69EB-4D78-93F6-F46D3FE0853B", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*", "matchCriteriaId": "178A1EE6-2DA8-48B8-B86D-8F2905B98E35", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*", "matchCriteriaId": "1B835C3B-D5A6-4B0E-8EC0-BDAB8A8A8B1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*", "matchCriteriaId": "9AAF52F0-8479-4F01-A954-8BDF1B02FD77", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*", "matchCriteriaId": "24424629-3EFC-42F0-A0F4-FDB838579F52", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*", "matchCriteriaId": "C0B9003D-9824-4FEE-B752-5BFA46CD8407", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "645E15DC-A3CC-4EC1-A6BC-2A11F5326E6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "E7D6A830-2D76-4113-87CA-66F4E0D25BC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "1562A45C-E100-4B92-B500-1C66D6A51561", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2CD16143-ABB7-46F7-A383-9760DCB0D6E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "013C7056-6842-485C-BB83-2C1411AF4539", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "07C8E0C2-8622-4436-8D45-734322676F07", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "69B97CC0-232E-4389-A099-2CD4CC86C1F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "22300323-06D6-404A-B10F-85B34A05DFC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "89ACDC55-8AD0-43C2-A5B4-5FCC19A909D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "3356A7B3-9A8B-4C8C-93FB-CB4796C05629", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "A76BC438-7E36-4C98-94B9-507BDA393BB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "CDA4BFCC-D573-4AC3-82E4-2F940970DC29", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "7B7C8FF4-C8F7-4155-806C-A83F6750B05E", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "223AC16F-8B70-4E55-A01B-A6012532CB8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "6F945C6D-ADE0-4077-B8EF-A6CCB0B4B761", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "F3099373-E05A-4DF0-88D8-2B73F716B578", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "AA9480E7-B7DB-47C5-9CFD-38ED9E0A2454", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*", "matchCriteriaId": "FC6D1E5C-4906-4D8F-84CE-B131658D3242", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*", "matchCriteriaId": "53D59BB9-26D8-43E7-BA7C-0BFDC4C8AEB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*", "matchCriteriaId": "7D25A1C7-E02F-4F6B-B553-A559CC235E9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*", "matchCriteriaId": "D1886BCB-E5A5-4897-B486-B8AA5560A2B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*", "matchCriteriaId": "BDA0C618-30D4-41BB-96AB-DD4D9B4D4085", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*", "matchCriteriaId": "0B852D87-A732-448A-8A56-93E45FD1AA07", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*", "matchCriteriaId": "BF70E5AB-28E5-4968-95A2-F1E8540983A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*", "matchCriteriaId": "4F070102-D4C2-4155-A587-7E6CC20508C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*", "matchCriteriaId": "C029FE04-EE97-4D69-B095-75D96F1DEF2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*", "matchCriteriaId": "3C89BA5B-BF3A-43B3-828C-33721FAF7DDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "0FBE0275-1FB8-433A-AE8F-E3A570249AD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "FFB7DCD5-726F-48BF-BFD4-CCB7380C0EAC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."}, {"lang": "es", "value": "La funci\u00f3n pidfile_write en core/pidfile.c en keepalived v1.2.2 y versiones anteriores utiliza permisos 0666 permisos para (1) keepalived.pid, (2) checkers.pid, y (3) archivos vrrp.pid en /var/run/, lo que permite a usuarios locales matar procesos de su elecci\u00f3n escribiendo un PID en uno de estos archivos."}], "id": "CVE-2011-1784", "lastModified": "2017-08-17T01:34:22.557", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 3.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-05-20T22:55:04.970", "references": [{"source": "secalert@redhat.com", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"}, {"source": "secalert@redhat.com", "url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"}, {"source": "secalert@redhat.com", "url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"}, {"source": "secalert@redhat.com", "url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"}, {"source": "secalert@redhat.com", "url": "http://openwall.com/lists/oss-security/2011/05/10/5"}, {"source": "secalert@redhat.com", "url": "http://openwall.com/lists/oss-security/2011/05/16/7"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/44460"}, {"source": "secalert@redhat.com", "url": "http://www.osvdb.org/72380"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/47859"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}