CVE-2011-1784 (GCVE-0-2011-1784)
Vulnerability from cvelistv5 – Published: 2011-05-20 22:00 – Updated: 2024-08-06 22:37
VLAI
EPSS
VEX
Summary
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://lists.debian.org/debian-security/2011/05/m… | mailing-listx_refsource_MLIST |
| http://lists.debian.org/debian-security/2011/05/m… | mailing-listx_refsource_MLIST |
| http://openwall.com/lists/oss-security/2011/05/10/5 | mailing-listx_refsource_MLIST |
| http://www.securityfocus.com/bid/47859 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/72380 | vdb-entryx_refsource_OSVDB |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281 | x_refsource_CONFIRM |
| http://secunia.com/advisories/44460 | third-party-advisoryx_refsource_SECUNIA |
| http://openwall.com/lists/oss-security/2011/05/16/7 | mailing-listx_refsource_MLIST |
| https://bugzilla.redhat.com/show_bug.cgi?id=704039 | x_refsource_CONFIRM |
| http://lists.debian.org/debian-security/2011/05/m… | mailing-listx_refsource_MLIST |
Date Public
2011-05-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T22:37:25.695Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "keepalived-pid-dos(67477)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
},
{
"name": "[debian-security] 20110511 Re: World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"name": "[debian-security] 20110510 World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"name": "[oss-security] 20110510 CVE request: keepalived pid file permissions issue",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"name": "47859",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/47859"
},
{
"name": "72380",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/72380"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"name": "44460",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44460"
},
{
"name": "[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"name": "[debian-security] 20110510 Re: World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-05-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "keepalived-pid-dos(67477)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
},
{
"name": "[debian-security] 20110511 Re: World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"name": "[debian-security] 20110510 World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"name": "[oss-security] 20110510 CVE request: keepalived pid file permissions issue",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"name": "47859",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/47859"
},
{
"name": "72380",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/72380"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"name": "44460",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44460"
},
{
"name": "[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"name": "[debian-security] 20110510 Re: World writable pid and lock files.",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2011-1784",
"datePublished": "2011-05-20T22:00:00.000Z",
"dateReserved": "2011-04-19T00:00:00.000Z",
"dateUpdated": "2024-08-06T22:37:25.695Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2011-1784",
"date": "2026-09-21",
"epss": "0.00367",
"percentile": "0.30413"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2556FCA0-2590-424E-9A79-867164153E6E",
"versionEndIncluding": "1.2.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FAF523F2-D9A6-432D-A7D9-A50FA79C26C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8FA9238F-D69D-473B-A104-47D8BA33D5DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AAB00A40-B543-405B-B28C-836F0C6E7F04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B370AC9F-7B1B-4473-8034-38867C7C2A58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "41D04C30-FF47-474B-9398-144F0BD074A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "01B2EED4-1A05-43FE-84BB-A346E712E3F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B71E052F-AC0C-4976-B433-3299B4E3A6D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*",
"matchCriteriaId": "B7C7D639-9B18-4217-9192-73D34D14FD0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "29CA469F-A2C8-4BE7-9C94-FDF1892C15DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*",
"matchCriteriaId": "CF26EB0B-8A82-4EB2-A7F7-57A82FBADD72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*",
"matchCriteriaId": "8742E6FD-8F67-4EEE-B415-8A0E0508AADA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8A7F6776-CA88-4573-B9FE-976114C0E2F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0EB667C6-DDC3-4D4F-AA6C-B014CC3866E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "DEF5D572-7637-4348-81D4-D0BB33E19FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "2DF99A64-2885-4BCF-9563-D6C667642BBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "175E0321-5E10-4C26-A559-026AFFA86353",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*",
"matchCriteriaId": "AC9512F9-2900-4445-8027-2349DD9D0EF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7D202340-9154-49B2-AF41-6D4BC366D29F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5403A412-60FF-4FFD-B58E-A9349A53CD75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "62973329-4CE3-4BFD-8787-5964BDD3DA7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2AEA2DA6-DDB5-4821-ABD0-1C41AC40B36F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "828B15F2-69EB-4D78-93F6-F46D3FE0853B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "178A1EE6-2DA8-48B8-B86D-8F2905B98E35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1B835C3B-D5A6-4B0E-8EC0-BDAB8A8A8B1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9AAF52F0-8479-4F01-A954-8BDF1B02FD77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*",
"matchCriteriaId": "24424629-3EFC-42F0-A0F4-FDB838579F52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "C0B9003D-9824-4FEE-B752-5BFA46CD8407",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "645E15DC-A3CC-4EC1-A6BC-2A11F5326E6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E7D6A830-2D76-4113-87CA-66F4E0D25BC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1562A45C-E100-4B92-B500-1C66D6A51561",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD16143-ABB7-46F7-A383-9760DCB0D6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "013C7056-6842-485C-BB83-2C1411AF4539",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "07C8E0C2-8622-4436-8D45-734322676F07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69B97CC0-232E-4389-A099-2CD4CC86C1F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "22300323-06D6-404A-B10F-85B34A05DFC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89ACDC55-8AD0-43C2-A5B4-5FCC19A909D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3356A7B3-9A8B-4C8C-93FB-CB4796C05629",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A76BC438-7E36-4C98-94B9-507BDA393BB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "CDA4BFCC-D573-4AC3-82E4-2F940970DC29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7B7C8FF4-C8F7-4155-806C-A83F6750B05E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "223AC16F-8B70-4E55-A01B-A6012532CB8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "6F945C6D-ADE0-4077-B8EF-A6CCB0B4B761",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "F3099373-E05A-4DF0-88D8-2B73F716B578",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*",
"matchCriteriaId": "AA9480E7-B7DB-47C5-9CFD-38ED9E0A2454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*",
"matchCriteriaId": "FC6D1E5C-4906-4D8F-84CE-B131658D3242",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*",
"matchCriteriaId": "53D59BB9-26D8-43E7-BA7C-0BFDC4C8AEB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*",
"matchCriteriaId": "7D25A1C7-E02F-4F6B-B553-A559CC235E9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*",
"matchCriteriaId": "D1886BCB-E5A5-4897-B486-B8AA5560A2B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*",
"matchCriteriaId": "BDA0C618-30D4-41BB-96AB-DD4D9B4D4085",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*",
"matchCriteriaId": "0B852D87-A732-448A-8A56-93E45FD1AA07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*",
"matchCriteriaId": "BF70E5AB-28E5-4968-95A2-F1E8540983A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "4F070102-D4C2-4155-A587-7E6CC20508C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*",
"matchCriteriaId": "C029FE04-EE97-4D69-B095-75D96F1DEF2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*",
"matchCriteriaId": "3C89BA5B-BF3A-43B3-828C-33721FAF7DDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0FBE0275-1FB8-433A-AE8F-E3A570249AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB7DCD5-726F-48BF-BFD4-CCB7380C0EAC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."
},
{
"lang": "es",
"value": "La funci\u00f3n pidfile_write en core/pidfile.c en keepalived v1.2.2 y versiones anteriores utiliza permisos 0666 permisos para (1) keepalived.pid, (2) checkers.pid, y (3) archivos vrrp.pid en /var/run/, lo que permite a usuarios locales matar procesos de su elecci\u00f3n escribiendo un PID en uno de estos archivos."
}
],
"id": "CVE-2011-1784",
"lastModified": "2024-11-21T01:27:02.587",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-05-20T22:55:04.970",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "secalert@redhat.com",
"url": "http://www.osvdb.org/72380"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.osvdb.org/72380"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2556FCA0-2590-424E-9A79-867164153E6E",
"versionEndIncluding": "1.2.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FAF523F2-D9A6-432D-A7D9-A50FA79C26C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8FA9238F-D69D-473B-A104-47D8BA33D5DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AAB00A40-B543-405B-B28C-836F0C6E7F04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B370AC9F-7B1B-4473-8034-38867C7C2A58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "41D04C30-FF47-474B-9398-144F0BD074A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "01B2EED4-1A05-43FE-84BB-A346E712E3F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B71E052F-AC0C-4976-B433-3299B4E3A6D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*",
"matchCriteriaId": "B7C7D639-9B18-4217-9192-73D34D14FD0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "29CA469F-A2C8-4BE7-9C94-FDF1892C15DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*",
"matchCriteriaId": "CF26EB0B-8A82-4EB2-A7F7-57A82FBADD72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*",
"matchCriteriaId": "8742E6FD-8F67-4EEE-B415-8A0E0508AADA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8A7F6776-CA88-4573-B9FE-976114C0E2F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0EB667C6-DDC3-4D4F-AA6C-B014CC3866E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "DEF5D572-7637-4348-81D4-D0BB33E19FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "2DF99A64-2885-4BCF-9563-D6C667642BBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "175E0321-5E10-4C26-A559-026AFFA86353",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*",
"matchCriteriaId": "AC9512F9-2900-4445-8027-2349DD9D0EF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7D202340-9154-49B2-AF41-6D4BC366D29F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5403A412-60FF-4FFD-B58E-A9349A53CD75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "62973329-4CE3-4BFD-8787-5964BDD3DA7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2AEA2DA6-DDB5-4821-ABD0-1C41AC40B36F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "828B15F2-69EB-4D78-93F6-F46D3FE0853B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "178A1EE6-2DA8-48B8-B86D-8F2905B98E35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1B835C3B-D5A6-4B0E-8EC0-BDAB8A8A8B1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9AAF52F0-8479-4F01-A954-8BDF1B02FD77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*",
"matchCriteriaId": "24424629-3EFC-42F0-A0F4-FDB838579F52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "C0B9003D-9824-4FEE-B752-5BFA46CD8407",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "645E15DC-A3CC-4EC1-A6BC-2A11F5326E6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E7D6A830-2D76-4113-87CA-66F4E0D25BC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1562A45C-E100-4B92-B500-1C66D6A51561",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD16143-ABB7-46F7-A383-9760DCB0D6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "013C7056-6842-485C-BB83-2C1411AF4539",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "07C8E0C2-8622-4436-8D45-734322676F07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69B97CC0-232E-4389-A099-2CD4CC86C1F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "22300323-06D6-404A-B10F-85B34A05DFC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89ACDC55-8AD0-43C2-A5B4-5FCC19A909D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3356A7B3-9A8B-4C8C-93FB-CB4796C05629",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A76BC438-7E36-4C98-94B9-507BDA393BB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "CDA4BFCC-D573-4AC3-82E4-2F940970DC29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7B7C8FF4-C8F7-4155-806C-A83F6750B05E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "223AC16F-8B70-4E55-A01B-A6012532CB8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "6F945C6D-ADE0-4077-B8EF-A6CCB0B4B761",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "F3099373-E05A-4DF0-88D8-2B73F716B578",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*",
"matchCriteriaId": "AA9480E7-B7DB-47C5-9CFD-38ED9E0A2454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*",
"matchCriteriaId": "FC6D1E5C-4906-4D8F-84CE-B131658D3242",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*",
"matchCriteriaId": "53D59BB9-26D8-43E7-BA7C-0BFDC4C8AEB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*",
"matchCriteriaId": "7D25A1C7-E02F-4F6B-B553-A559CC235E9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*",
"matchCriteriaId": "D1886BCB-E5A5-4897-B486-B8AA5560A2B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*",
"matchCriteriaId": "BDA0C618-30D4-41BB-96AB-DD4D9B4D4085",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*",
"matchCriteriaId": "0B852D87-A732-448A-8A56-93E45FD1AA07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*",
"matchCriteriaId": "BF70E5AB-28E5-4968-95A2-F1E8540983A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "4F070102-D4C2-4155-A587-7E6CC20508C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*",
"matchCriteriaId": "C029FE04-EE97-4D69-B095-75D96F1DEF2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*",
"matchCriteriaId": "3C89BA5B-BF3A-43B3-828C-33721FAF7DDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0FBE0275-1FB8-433A-AE8F-E3A570249AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB7DCD5-726F-48BF-BFD4-CCB7380C0EAC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."
},
{
"lang": "es",
"value": "La funci\u00f3n pidfile_write en core/pidfile.c en keepalived v1.2.2 y versiones anteriores utiliza permisos 0666 permisos para (1) keepalived.pid, (2) checkers.pid, y (3) archivos vrrp.pid en /var/run/, lo que permite a usuarios locales matar procesos de su elecci\u00f3n escribiendo un PID en uno de estos archivos."
}
],
"id": "CVE-2011-1784",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-05-20T22:55:04.970",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "secalert@redhat.com",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "secalert@redhat.com",
"url": "http://www.osvdb.org/72380"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.debian.org/debian-security/2011/05/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/10/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://openwall.com/lists/oss-security/2011/05/16/7"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/44460"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.osvdb.org/72380"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/47859"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
},
"redhat_vex": {
"current_release_date": "2025-11-21T12:57:48+00:00",
"cve": "CVE-2011-1784",
"id": "CVE-2011-1784",
"initial_release_date": "2011-05-10T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "keepalived: insecure permissions on pid files",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-1784.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2023-02-15T05:53:16Z",
"cve": "CVE-2011-1784",
"id": "CVE-2011-1784",
"initial_release_date": "2023-02-15T05:53:16Z",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2011-1784",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2011-1784.json",
"version": "2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…