Approved changes feed: RSS · Atom
cpe:2.3:a:openswan:openswan:2.2.0:*:*:*:*:*:*:*
part: a version: 2.2.0 update: *
| Vendor | Openswan (7a654ed7-1875-5eed-9b05-d3d9e3025fef) |
|---|---|
| Product | Openswan (ca94c2c5-2c1d-5179-a154-da33418ce313) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/louisveblen/openswan |
purl2cpe | 2026-06-01 10:17:47.788222 |
pkg:github/qianguozheng/openswan |
purl2cpe | 2026-06-01 10:17:47.788224 |
pkg:github/xelerance/openswan |
purl2cpe | 2026-06-01 10:17:47.788225 |
pkg:rpm/opensuse/openswan |
purl2cpe | 2026-06-01 10:17:47.788227 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-2147 |
vulnerable | 2026-06-08 04:58:04.384873 |
Details available
Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.960Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.