CVEvulnerability

CVE-2011-1784

3.6 LOW Published 2011-05-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-264

Description

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Affected configurations

• keepalived keepalived (<= 1.2.2) • keepalived keepalived 0.2.1 • keepalived keepalived 0.2.3 • keepalived keepalived 0.2.6 • keepalived keepalived 0.2.7 • keepalived keepalived 0.3.5 • keepalived keepalived 0.3.6 • keepalived keepalived 0.3.7 • keepalived keepalived 0.3.8 • keepalived keepalived 0.4.8 • keepalived keepalived 0.4.9 • keepalived keepalived 0.4.9a • keepalived keepalived 0.5.3 • keepalived keepalived 0.5.5 • keepalived keepalived 0.5.6 • keepalived keepalived 0.5.7 • keepalived keepalived 0.5.8 • keepalived keepalived 0.5.9 • keepalived keepalived 0.6.1 • keepalived keepalived 0.6.2 • keepalived keepalived 0.6.3 • keepalived keepalived 0.6.4 • keepalived keepalived 0.6.5 • keepalived keepalived 0.6.6 • keepalived keepalived 0.6.7 • keepalived keepalived 0.6.8 • keepalived keepalived 0.6.9 • keepalived keepalived 0.6.10 • keepalived keepalived 0.7.1 • keepalived keepalived 0.7.6 • keepalived keepalived 1.0.0 • keepalived keepalived 1.0.1 • keepalived keepalived 1.0.2 • keepalived keepalived 1.0.3 • keepalived keepalived 1.1.0 • keepalived keepalived 1.1.1 • keepalived keepalived 1.1.2 • keepalived keepalived 1.1.3 • keepalived keepalived 1.1.4 • keepalived keepalived 1.1.5 • keepalived keepalived 1.1.6 • keepalived keepalived 1.1.7 • keepalived keepalived 1.1.8 • keepalived keepalived 1.1.9 • keepalived keepalived 1.1.10 • keepalived keepalived 1.1.11 • keepalived keepalived 1.1.12 • keepalived keepalived 1.1.13 • keepalived keepalived 1.1.14 • keepalived keepalived 1.1.15 • keepalived keepalived 1.1.16 • keepalived keepalived 1.1.17 • keepalived keepalived 1.1.18 • keepalived keepalived 1.1.19 • keepalived keepalived 1.1.20 • keepalived keepalived 1.2.0 • keepalived keepalived 1.2.1

Related

Weakness · not in database (1)

References