CVE-2017-11747

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a...

PT-2017-12221

Name of the Vulnerable Software and Affected Versions Tinyproxy versions 1.8.4 and earlier Description The issue allows local users to potentially kill arbitrary processes by modifying the tinyproxy.pid file, which is created after privileges are dropped to a non-root account. This could be...