NVD

Id
45837  
Name
CVE-2012-4454  
Description
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.  
Reject
 
CVSS Version
2  
CVSS Score
2.9  
Severity
Low  
CVSS Base Score
2.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-04-10  
Seq
2012-4454  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230132 45837 CVE-2012-4454 http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki;a=commitdiff;h=58345488c9351d9be9a4be27c8b407c2706a33a9  View
230133 45837 CVE-2012-4454 http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki;a=commitdiff;h=b7fcb3eb0319183348f1f4fb90ede4edd6487c30  View
230134 45837 CVE-2012-4454 [Opencryptoki-tech] 20120223 opencryptoki version 2.4.1 released  View
230135 45837 CVE-2012-4454 [oss-security] 20120906 CVE request: opencryptoki insecure lock files handling  View
230136 45837 CVE-2012-4454 [oss-security] 20120907 Re: CVE request: opencryptoki insecure lock files handling  View
230137 45837 CVE-2012-4454 [oss-security] 20120909 Re: CVE request: opencryptoki insecure lock files handling  View
230138 45837 CVE-2012-4454 [oss-security] 20120920 Re: CVE request: opencryptoki insecure lock files handling  View
230139 45837 CVE-2012-4454 [oss-security] 20120924 Re: CVE request: opencryptoki insecure lock files handling  View
230140 45837 CVE-2012-4454 [oss-security] 20120927 Re: CVE request: opencryptoki insecure lock files handling  View
230141 45837 CVE-2012-4454 55627  View
230142 45837 CVE-2012-4454 opencryptoki-mutliple-symlink(78797)  View
230143 45837 CVE-2012-4454 https://bugzilla.redhat.com/show_bug.cgi?id=730636  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29205 JVNDB-2012-004912 openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 openCryptoki は、スピンロックを使用する際、任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される、または設定される脆弱性が存在します。 CVE-2012-4454 57692 CVE-2012-4454 45837 2.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004912.html 2012-02-22 2012-10-15 View