CVE-2012-4454
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world...
CVE-2012-4454 is a low vulnerability (CVSS 2.9) in Opencryptoki Project Opencryptoki, published October 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.13%, the 66th percentile. Fixed in opencryptoki 3.4.1+dfsg-1.
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
Exploit likelihood
What each source reports
NVD Score used
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
CVE-2012-4454- CVSS 2.0
- 2.9 Low
AV:A/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
CVE-2012-4454- Updated
- 2026-11-02
EUVDEUVD-2012-4385 No score
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
EUVD-2012-4385- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mvr7-mrp6-366f No score
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world...
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
GHSA-mvr7-mrp6-366f- Updated
- 2026-11-02
OSV No score
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
CVE-2012-4454- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4454 No score
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
- Record
DEBIAN-CVE-2012-4454- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opencryptokiDebian:12 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:13 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:14 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2012/09/09/2
secunia.com/advisories/50702
securityfocus.com/bid/55627
sourceforge.net/mailarchive/message.php?msg_id=28878345
Show 12 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=730636
exchange.xforce.ibmcloud.com/vulnerabilities/78797
opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=b7fcb3eb0319183348f1f4fb90ede4edd6487c30
nvd.nist.gov/vuln/detail/CVE-2012-4454
github.com/advisories/GHSA-mvr7-mrp6-366f
security-tracker.debian.org/tracker/CVE-2012-4454