Test ID:	1.3.6.1.4.1.25623.1.0.140386
Category:	Privilege escalation
Title:	Kannel Privilege Escalation Vulnerability
Summary:	Kannel is prone to a privilege escalation vulnerability.
Description:	Summary: Kannel is prone to a privilege escalation vulnerability. Vulnerability Insight: The server daemons create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a 'kill `cat /pathname`' command, as demonstrated by bearerbox. Affected Software/OS: Kannel version 1.5.0 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14609 https://redmine.kannel.org/issues/771
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.