Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-05-20T22:00:00

Updated: 2024-08-06T22:53:16.960Z

Reserved: 2011-05-20T00:00:00

Link: CVE-2011-2147

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-05-20T22:55:05.487

Modified: 2024-11-21T01:27:41.460

Link: CVE-2011-2147

cve-icon Redhat

Severity : Moderate

Publid Date: 2011-05-11T00:00:00Z

Links: CVE-2011-2147 - Bugzilla