NVD

Id
45044  
Name
CVE-2012-3449  
Description
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2012-08-08  
Seq
2012-3449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225839 45044 CVE-2012-3449 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665  View
225840 45044 CVE-2012-3449 [oss-security] 20120802 openvswitch world writable directories (CVE-2012-3449)  View
225841 45044 CVE-2012-3449 [oss-security] 20120803 Re: openvswitch world writable directories (CVE-2012-3449)  View
225842 45044 CVE-2012-3449 54789  View
225843 45044 CVE-2012-3449 54794  View
225844 45044 CVE-2012-3449 openvswitch-privilege-escalation(77417)  View
225845 45044 CVE-2012-3449 https://bugzilla.redhat.com/show_bug.cgi?id=845350  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27792 JVNDB-2012-003499 Open vSwitch における任意のファイルを削除される脆弱性 Open vSwitch は、(1) /var/lib/openvswitch/pki/controllerca/incoming/、または (2) /var/lib/openvswitch/pki/switchca/incoming/ に対して、誰でも書き込みできる権限 (world-writable permissions) を用いるため、任意のファイルを削除される、または上書きされる脆弱性が存在します。 CVE-2012-3449 56687 CVE-2012-3449 45044 3.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003499.html 2012-08-07 2012-08-09 View