CVE-2011-1784

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3)…

published May 20, 2011

CVSS
—
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.1th percentile
Published
2011-05-20T22:00Z
EPSS history
Timeline
  • 20 MAY 22:00Z
    The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3)…
    cvelistv5