NVD

Id
45838  
Name
CVE-2012-4455  
Description
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-04-10  
Seq
2012-4455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230144 45838 CVE-2012-4455 http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki;a=commitdiff;h=5667edb52cd27b7e512f48f823b4bcc6b872ab15  View
230145 45838 CVE-2012-4455 [Opencryptoki-tech] 20120427 opencryptoki release 2.4.2  View
230146 45838 CVE-2012-4455 [oss-security] 20120906 CVE request: opencryptoki insecure lock files handling  View
230147 45838 CVE-2012-4455 [oss-security] 20120907 Re: CVE request: opencryptoki insecure lock files handling  View
230148 45838 CVE-2012-4455 [oss-security] 20120909 Re: CVE request: opencryptoki insecure lock files handling  View
230149 45838 CVE-2012-4455 [oss-security] 20120920 Re: CVE request: opencryptoki insecure lock files handling  View
230150 45838 CVE-2012-4455 [oss-security] 20120924 Re: CVE request: opencryptoki insecure lock files handling  View
230151 45838 CVE-2012-4455 [oss-security] 20120927 Re: CVE request: opencryptoki insecure lock files handling  View
230152 45838 CVE-2012-4455 55627  View
230153 45838 CVE-2012-4455 opencryptoki-file-symlink(78943)  View
230154 45838 CVE-2012-4455 https://bugzilla.redhat.com/show_bug.cgi?id=730636  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29206 JVNDB-2012-004913 openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 openCryptoki には、任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される、または設定される脆弱性が存在します。 CVE-2012-4455 57693 CVE-2012-4455 45838 6.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004913.html 2012-04-27 2012-10-15 View