CVE-2012-3449
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca...
CVE-2012-3449 is a low vulnerability (CVSS 3.6) in Openvswitch, published August 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in openvswitch 1.4.2+git20120612-8.
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
Exploit likelihood
What each source reports
NVD Score used
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
CVE-2012-3449- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
CVE-2012-3449- Updated
- 2026-11-02
EUVDEUVD-2012-3411 No score
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
EUVD-2012-3411- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9jx-2g6h-pw23 No score
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca...
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
GHSA-f9jx-2g6h-pw23- Updated
- 2026-11-02
OSV No score
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
CVE-2012-3449- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3449 No score
Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
- Record
DEBIAN-CVE-2012-3449- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10150-1 No score
openvswitch-2.6.1-2.1 on GA media
These are all security issues fixed in the openvswitch-2.6.1-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10150-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12037-1 No score
libovn-21_09-0-21.09.1-1.1 on GA media
These are all security issues fixed in the libovn-21_09-0-21.09.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12037-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvswitchDebian:12 |
before 1.4.2+git20120612-8 | 1.4.2+git20120612-8 |
openvswitchDebian:13 |
before 1.4.2+git20120612-8 | 1.4.2+git20120612-8 |
openvswitchDebian:14 |
before 1.4.2+git20120612-8 | 1.4.2+git20120612-8 |
openvswitchopenSUSE:Tumbleweed |
before 2.6.1-2.1 | 2.6.1-2.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |