CVE-2011-2147

CVE-2011-2147 describes a permission vulnerability in Openswan 2.2.x, specifically affecting the /var/run/starter.pid and /var/lock/subsys/ipsec files. This flaw allows local users to terminate arbitrary processes by writing a PID to these files, or potentially bypass disk quotas due to overly permissive 0666 file permissions. The vulnerability has a CVSS score of 3.6 (low severity), indicating a local attack vector with low access complexity and no authentication required, leading to partial integrity and availability impacts. Its EPSS and FAUCET scores are very low, suggesting a minimal likelihood of exploitation and overall risk. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, further indicating a lack of widespread attention or exploitation.