PT-2017-12996 · Unrealircd · Unrealircd

Mjo · Published 2017-08-23 · Updated 2019-10-03 · CVE-2017-13649

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 4.0.13 and earlier

Description The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which is created after dropping privileges to a non-root account. This could be exploited if a root script executes a command to kill a process based on the PID file content. However, the vendor notes that there is no common scenario in which a root script would execute this kill command.

Recommendations For UnrealIRCd versions 4.0.13 and earlier, consider restricting access to the PID file to prevent modification by non-root accounts until a fix is available. As a temporary workaround, avoid using root scripts that execute kill commands based on PID file content.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2017-13649

Affected Products

Unrealircd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-13649 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13649 · Vendor Advisory
• https://bugs.unrealircd.org/view.php?id=4990 · Note
• http://securityfocus.com/bid/100507 · Note