RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
BID:54794
Info
RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 54794 |
| Class: | Design Error |
| CVE: |
CVE-2012-3449 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 02 2012 12:00AM |
| Updated: | Nov 09 2012 10:30AM |
| Credit: | Andreas Beckmann |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
Open vSwitch is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in affected directories.
Open vSwitch 1.4.2 is affected; other versions may also be vulnerable.
Note: This BID is being retired as a duplicate of BID 54789 (Debian 'openvswitch-pki' Package Multiple Insecure File Permissions Vulnerabilities).
Open vSwitch is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in affected directories.
Open vSwitch 1.4.2 is affected; other versions may also be vulnerable.
Note: This BID is being retired as a duplicate of BID 54789 (Debian 'openvswitch-pki' Package Multiple Insecure File Permissions Vulnerabilities).
Exploit / POC
RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
RETIRED: Open vSwitch CVE-2012-3449 Insecure Directory Permissions Vulnerability
References:
References: