CVEvulnerability
CVE-2012-4454
2.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
Affected configurations
• opencryptoki project opencryptoki (<= 2.4)
• opencryptoki project opencryptoki 2.2.3
• opencryptoki project opencryptoki 2.2.4
• opencryptoki project opencryptoki 2.2.4.1
• opencryptoki project opencryptoki 2.2.5
• opencryptoki project opencryptoki 2.2.6
• opencryptoki project opencryptoki 2.2.7
• opencryptoki project opencryptoki 2.2.8
• opencryptoki project opencryptoki 2.3.0
• opencryptoki project opencryptoki 2.3.1
• opencryptoki project opencryptoki 2.3.2
• opencryptoki project opencryptoki 2.3.3
Related
Weakness · not in database (1)
References
- http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=58345488c9351d9be9a4be27c8b407c2706a33a9 opencryptoki.git.sourceforge.net
- http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=b7fcb3eb0319183348f1f4fb90ede4edd6487c30 opencryptoki.git.sourceforge.net
- http://secunia.com/advisories/50702 Vendor Advisory
- http://sourceforge.net/mailarchive/message.php?msg_id=28878345 sourceforge.net
- http://www.openwall.com/lists/oss-security/2012/09/07/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/07/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/09/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/20/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/25/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/27/2 www.openwall.com
- http://www.securityfocus.com/bid/55627 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=730636 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78797 exchange.xforce.ibmcloud.com
- http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=58345488c9351d9be9a4be27c8b407c2706a33a9 opencryptoki.git.sourceforge.net
- http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=b7fcb3eb0319183348f1f4fb90ede4edd6487c30 opencryptoki.git.sourceforge.net
- http://secunia.com/advisories/50702 Vendor Advisory
- http://sourceforge.net/mailarchive/message.php?msg_id=28878345 sourceforge.net
- http://www.openwall.com/lists/oss-security/2012/09/07/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/07/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/09/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/20/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/25/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/27/2 www.openwall.com
- http://www.securityfocus.com/bid/55627 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=730636 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78797 exchange.xforce.ibmcloud.com