Gentoo Security Advisory GLSA 201203-13 (Openswan)

The remote host is missing updates announced in advisory GLSA 201203-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...

CVE-2011-2147

Technical details for CVE-2011-2147 are not provided in the connected documents. The initial description summarizes local permission issues in OpenSwan 2.2.x; monitor for updated advisories or vendor patches.