CVE-2017-7560

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-377CWE-732

Affected software

VendorProductVersions
Red Hat, Inc.rhnsdn/a

References

Timeline

Published
Sep 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-75617.5Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS comCVE-2017-75626.5An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A CVE-2017-75638.1In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protectCVE-2017-75647.5In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of servCVE-2017-75658.8Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041.CVE-2017-75667.7MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.CVE-2017-75685.3NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenCVE-2017-75698.6In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHCVE-2017-75708.8PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (sCVE-2017-75718.0public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.CVE-2017-75728.1The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorizCVE-2017-75749.8Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The
CVE-2017-7560: Medium severity, CVSS 5.5 | Vulnix