CVE-2012-4455
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary...
CVE-2012-4455 is a medium vulnerability (CVSS 6.2) in Opencryptoki Project Opencryptoki, published October 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in opencryptoki 3.4.1+dfsg-1.
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
Exploit likelihood
What each source reports
NVD Score used
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- Updated
- 2026-11-02
EUVDEUVD-2012-4386 No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
EUVD-2012-4386- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-45q7-7mrv-f7jr No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary...
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
GHSA-45q7-7mrv-f7jr- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4455 No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
DEBIAN-CVE-2012-4455- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opencryptokiDebian:12 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:13 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:14 |
before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2012/09/09/2
secunia.com/advisories/50702
securityfocus.com/bid/55627
exchange.xforce.ibmcloud.com/vulnerabilities/78943
Show 10 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=730636
sourceforge.net/mailarchive/message.php?msg_id=29191022
opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=5667edb52cd27b7e512f48f823b4bcc6b872ab15
nvd.nist.gov/vuln/detail/CVE-2012-4455
github.com/advisories/GHSA-45q7-7mrv-f7jr
security-tracker.debian.org/tracker/CVE-2012-4455