Skip to content
CVE Tracker
Back

CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2)…

Low3.6EPSS 0.34%
Published
Updated
Reserved
Assigned by
mitre

Description

Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784.

Scores

CVSS scores of CVE-2011-2147, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low3.6AV:L/AC:L/Au:N/C:N/I:P/A:P
EPSS (exploitation in 30 days)
0.34% · top 72% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.6.

Weakness

Affected products

  • n/a

    • affected n/a

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .