Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mjo

#45329of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2017-12996
5.5
2017-08-23
Unrealircd · Unrealircd · CVE-2017-13649
**Name of the Vulnerable Software and Affected Versions** UnrealIRCd versions 4.0.13 and earlier **Description** The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which is created after dropping privileges to a non-root account. This could be exploited if a root script executes a command to kill a process based on the PID file content. However, the vendor notes that there is no common scenario in which a root script would execute this kill command. **Recommendations** For UnrealIRCd versions 4.0.13 and earlier, consider restricting access to the PID file to prevent modification by non-root accounts until a fix is available. As a temporary workaround, avoid using root scripts that execute kill commands based on PID file content.