TI-2011-00007 Aliases CVE-2011-0007 GHSA-h6hm-9c4m-mf67

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite…

LOW 16CWE-59Published 2011-01-11 · Updated 2024-08-06

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: —
Confidentiality · integrity · availability: None · Partial · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal is sent, or (2) pimd.cache when USR2 is sent.

Why it matters now

EPSS 0.00342 27th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:troglobit:pimd:2.1.5:::::::*	2.1.5	Vulnerable	troglobit

cpe:2.3:a:troglobit:pimd:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·troglobit

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2011-0007
2026-10-03 Alias added: GHSA-h6hm-9c4m-mf67

References

Patch 1

[oss-security] 20110107 CVE Request - pimd - Insecure file creation in /var/tmp

Advisory 1

DSA-2147

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences