CVE-2012-3449

EUVD-2012-3411
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
openvswitchopenvswitch
1.4.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openvswitch
bookworm
3.1.0-2+deb12u1
fixed
bookworm (security)
3.1.0-2+deb12u1
fixed
bullseye
2.15.0+ds1-2+deb11u5
fixed
bullseye (security)
2.15.0+ds1-2+deb11u5
fixed
sid
3.4.0-1
fixed
trixie
3.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openvswitch
hardy
dne
lucid
dne
natty
ignored
oneiric
ignored
precise
ignored
quantal
not-affected
raring
not-affected
saucy
not-affected
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665
http://www.openwall.com/lists/oss-security/2012/08/02/6
http://www.openwall.com/lists/oss-security/2012/08/03/6
http://www.securityfocus.com/bid/54789
http://www.securityfocus.com/bid/54794
https://bugzilla.redhat.com/show_bug.cgi?id=845350
https://exchange.xforce.ibmcloud.com/vulnerabilities/77417
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665
http://www.openwall.com/lists/oss-security/2012/08/02/6
http://www.openwall.com/lists/oss-security/2012/08/03/6
http://www.securityfocus.com/bid/54789
http://www.securityfocus.com/bid/54794
https://bugzilla.redhat.com/show_bug.cgi?id=845350
https://exchange.xforce.ibmcloud.com/vulnerabilities/77417