CVE-2017-11746

Published: Jul 30, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill `cat /pathname/tenshi.pid`" command.

Affected (1)

Products: Inversepath: Tenshi

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Inversepath Tenshi	Version 0.15

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (4)

https://github.com/inversepath/tenshi/issues/6

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/201804-18

Source: cve@mitre.org

https://github.com/inversepath/tenshi/issues/6

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/201804-18

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.