PT-2017-12996 · Unrealircd · Unrealircd

Mjo · Publicado 2017-08-23 · Atualizado 2019-10-03 · CVE-2017-13649

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 4.0.13 and earlier

Description The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which is created after dropping privileges to a non-root account. This could be exploited if a root script executes a command to kill a process based on the PID file content. However, the vendor notes that there is no common scenario in which a root script would execute this kill command.

Recommendations For UnrealIRCd versions 4.0.13 and earlier, consider restricting access to the PID file to prevent modification by non-root accounts until a fix is available. As a temporary workaround, avoid using root scripts that execute kill commands based on PID file content.

Correção

Improper Initialization

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

CVE-2017-13649

Produtos afetados

Unrealircd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-13649 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13649 · Aviso do Fabricante
• https://bugs.unrealircd.org/view.php?id=4990 · Nota
• http://securityfocus.com/bid/100507 · Nota