The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Updated keepalived package fixes security vulnerability :

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files (CVE-2011-1784).

A security issue due to syslog being used inside of sighandlers has also been fixed.

Finally, keepalived was failing to load the ip_vs kernel module because of an incorrect modprobe option. This has also been corrected.

Update to keepalived v1.2.5 stable release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to keepalived v1.2.3 stable release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201207-07 (Keepalived: Denial of Service)

    The 'pidfile_write()' function in pidfile.c in Keepalived writes PID       files with insecure permissions.
  Impact :

    A local attacker may be able to cause a Denial of Service of arbitrary       processes.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
66108	Mandriva Linux Security Advisory : keepalived (MDVSA-2013:096)	Nessus	Mandriva Local Security Checks	low
61778	Fedora 17 : keepalived-1.2.5-2.fc17 (2012-12377)	Nessus	Fedora Local Security Checks	low
61776	Fedora 16 : keepalived-1.2.3-2.fc16 (2012-12367)	Nessus	Fedora Local Security Checks	low
59899	GLSA-201207-07 : Keepalived: Denial of Service	Nessus	Gentoo Local Security Checks	low

Detections

Analytics

CVE-2011-1784

medium

Tenable Plugins

low

low

low

low