CVE-2012-4455
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary...
CVE-2012-4455 is a medium vulnerability (CVSS 6.2) in Opencryptoki Project Opencryptoki, published October 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in opencryptoki 3.4.1+dfsg-1.
- Severity
- 6.2 MediumCVSS 2.0, NVD
- Exploit chance
- 0.36%EPSS, 30th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.4.1+dfsg-1opencryptoki +2 more
Description
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opencryptokiDebian:12 | before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:13 | before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
opencryptokiDebian:14 | before 3.4.1+dfsg-1 | 3.4.1+dfsg-1 |
What each source reports
NVD Score used
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- Updated
- 2026-11-02
EUVDEUVD-2012-4386No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
EUVD-2012-4386- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-45q7-7mrv-f7jrNo score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary...
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
GHSA-45q7-7mrv-f7jr- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVNo score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
CVE-2012-4455- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4455No score
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.
- Record
DEBIAN-CVE-2012-4455- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/09/09/2
secunia.com/advisories/50702
securityfocus.com/bid/55627
exchange.xforce.ibmcloud.com/vulnerabilities/78943
Show 10 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=730636
sourceforge.net/mailarchive/message.php?msg_id=29191022
opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=5667edb52cd27b7e512f48f823b4bcc6b872ab15
nvd.nist.gov/vuln/detail/CVE-2012-4455
github.com/advisories/GHSA-45q7-7mrv-f7jr
security-tracker.debian.org/tracker/CVE-2012-4455