CVE-2012-4455: Medium severity Opencryptoki Project Opencryptoki vulnerability
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptokistdll file in /var/lock/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4455?
CVE-2012-4455 is considered a high severity vulnerability due to its potential for local users to exploit symlink attacks.
How do I fix CVE-2012-4455?
To fix CVE-2012-4455, ensure that proper permissions are enforced on the /var/lock/ directory and its files to prevent unauthorized access.
What systems are affected by CVE-2012-4455?
CVE-2012-4455 specifically affects version 2.4.1 of Opencryptoki.
Can CVE-2012-4455 be exploited remotely?
CVE-2012-4455 requires local access to exploit, making it a local privilege escalation vulnerability.
What is a symlink attack related to CVE-2012-4455?
A symlink attack in the context of CVE-2012-4455 involves creating malicious symbolic links to manipulate file permissions and access.