CVE-2017-11746

CVE-2017-11746 describes a local privilege escalation vulnerability in Tenshi 0.15. The software creates a tenshi.pid file after dropping privileges, which a local attacker with access to the non-root Tenshi account could modify. This allows an attacker to inject an arbitrary process ID into the tenshi.pid file, leading to the termination of any process when a root script subsequently executes a "kill" command using the modified PID. This vulnerability is rated 7.5 HIGH on the CVSS scale, indicating a high potential for impact, specifically denial of service (A:H). The attack vector is local (AV:L), meaning an attacker needs prior access to the system, but the attack complexity is low (AC:L). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, aligning with the typical lack of attention for the majority of CVEs.