CVE-2012-3449
Fixed in a distro release EPSS <1%
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
Products: openvswitch
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 1.4.2+git20120612-8 |
| Debian 13 | openvswitch | 1.4.2+git20120612-8 |
| Debian 14 | openvswitch | 1.4.2+git20120612-8 |
| openSUSE Tumbleweed | openvswitch | 2.6.1-2.1 |