CVE-2012-3449 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-3449 Interim 1 15 2022-10-15T17:47:22Z current 2021-05-30T13:05:04Z 2022-10-15T17:47:22Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-3449 Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Module for Server Applications 15 openSUSE Tumbleweed libopenvswitch-2_11-0-2.11.1-1.75 libopenvswitch-2_8-0-2.8.2-4.16 libopenvswitch-2_8-0-2.8.4-3.36 libovn-21_09-0-21.09.1-1.1 openvswitch-2.1.2-4.5.8 openvswitch-2.1.2-8.9 openvswitch-2.11.1-1.75 openvswitch-2.5.1-24.15 openvswitch-2.6.1-2.1 openvswitch-2.7.0-2.29 openvswitch-2.8.2-4.16 openvswitch-2.8.4-3.36 openvswitch-devel-2.6.1-2.1 openvswitch-devel-2.8.2-4.16 openvswitch-dpdk-2.5.1-24.15 openvswitch-dpdk-2.6.1-2.1 openvswitch-dpdk-devel-2.6.1-2.1 openvswitch-dpdk-ovn-2.6.1-2.1 openvswitch-dpdk-pki-2.6.1-2.1 openvswitch-dpdk-switch-2.5.1-24.15 openvswitch-dpdk-switch-2.6.1-2.1 openvswitch-dpdk-test-2.6.1-2.1 openvswitch-dpdk-vtep-2.6.1-2.1 openvswitch-kmp-default-2.1.2_k3.12.28_4-8.9 openvswitch-kmp-default-2.1.2_k3.12.49_11-4.5.8 openvswitch-kmp-xen-2.1.2_k3.12.28_4-8.14 openvswitch-kmp-xen-2.1.2_k3.12.49_11-4.5.8 openvswitch-ovn-2.6.1-2.1 openvswitch-pki-2.6.1-2.1 openvswitch-switch-2.1.2-4.5.8 openvswitch-switch-2.1.2-8.9 openvswitch-switch-2.5.1-24.15 openvswitch-switch-2.6.1-2.1 openvswitch-test-2.6.1-2.1 openvswitch-vtep-2.6.1-2.1 ovn-21.09.1-1.1 ovn-central-21.09.1-1.1 ovn-devel-21.09.1-1.1 ovn-doc-21.09.1-1.1 ovn-docker-21.09.1-1.1 ovn-host-21.09.1-1.1 ovn-vtep-21.09.1-1.1 python-openvswitch-2.6.1-2.1 python-openvswitch-test-2.6.1-2.1 libopenvswitch-2_11-0-2.11.1-1.75 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 openvswitch-2.11.1-1.75 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libopenvswitch-2_8-0-2.8.2-4.16 as a component of SUSE Linux Enterprise Module for Server Applications 15 openvswitch-2.8.2-4.16 as a component of SUSE Linux Enterprise Module for Server Applications 15 openvswitch-devel-2.8.2-4.16 as a component of SUSE Linux Enterprise Module for Server Applications 15 openvswitch-2.1.2-8.9 as a component of SUSE Linux Enterprise Server 12 openvswitch-kmp-default-2.1.2_k3.12.28_4-8.9 as a component of SUSE Linux Enterprise Server 12 openvswitch-kmp-xen-2.1.2_k3.12.28_4-8.14 as a component of SUSE Linux Enterprise Server 12 openvswitch-switch-2.1.2-8.9 as a component of SUSE Linux Enterprise Server 12 openvswitch-2.1.2-4.5.8 as a component of SUSE Linux Enterprise Server 12 SP1 openvswitch-kmp-default-2.1.2_k3.12.49_11-4.5.8 as a component of SUSE Linux Enterprise Server 12 SP1 openvswitch-kmp-xen-2.1.2_k3.12.49_11-4.5.8 as a component of SUSE Linux Enterprise Server 12 SP1 openvswitch-switch-2.1.2-4.5.8 as a component of SUSE Linux Enterprise Server 12 SP1 openvswitch-2.5.1-24.15 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-2.5.1-24.15 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-switch-2.5.1-24.15 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-switch-2.5.1-24.15 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-2.7.0-2.29 as a component of SUSE Linux Enterprise Server 12 SP3 libopenvswitch-2_8-0-2.8.4-3.36 as a component of SUSE Linux Enterprise Server 12 SP4 openvswitch-2.8.4-3.36 as a component of SUSE Linux Enterprise Server 12 SP4 libopenvswitch-2_11-0-2.11.1-1.75 as a component of SUSE Linux Enterprise Server 12 SP5 openvswitch-2.11.1-1.75 as a component of SUSE Linux Enterprise Server 12 SP5 openvswitch-2.5.1-24.15 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openvswitch-switch-2.5.1-24.15 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libovn-21_09-0-21.09.1-1.1 as a component of openSUSE Tumbleweed openvswitch-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-devel-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-devel-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-ovn-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-pki-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-switch-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-test-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-dpdk-vtep-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-ovn-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-pki-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-switch-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-test-2.6.1-2.1 as a component of openSUSE Tumbleweed openvswitch-vtep-2.6.1-2.1 as a component of openSUSE Tumbleweed ovn-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-central-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-devel-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-doc-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-docker-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-host-21.09.1-1.1 as a component of openSUSE Tumbleweed ovn-vtep-21.09.1-1.1 as a component of openSUSE Tumbleweed python-openvswitch-2.6.1-2.1 as a component of openSUSE Tumbleweed python-openvswitch-test-2.6.1-2.1 as a component of openSUSE Tumbleweed Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files. CVE-2012-3449 SUSE Linux Enterprise High Performance Computing 12 SP5:libopenvswitch-2_11-0-2.11.1-1.75 SUSE Linux Enterprise High Performance Computing 12 SP5:openvswitch-2.11.1-1.75 SUSE Linux Enterprise Module for Server Applications 15:libopenvswitch-2_8-0-2.8.2-4.16 SUSE Linux Enterprise Module for Server Applications 15:openvswitch-2.8.2-4.16 SUSE Linux Enterprise Module for Server Applications 15:openvswitch-devel-2.8.2-4.16 SUSE Linux Enterprise Server 12:openvswitch-2.1.2-8.9 SUSE Linux Enterprise Server 12:openvswitch-kmp-default-2.1.2_k3.12.28_4-8.9 SUSE Linux Enterprise Server 12:openvswitch-kmp-xen-2.1.2_k3.12.28_4-8.14 SUSE Linux Enterprise Server 12:openvswitch-switch-2.1.2-8.9 SUSE Linux Enterprise Server 12 SP1:openvswitch-2.1.2-4.5.8 SUSE Linux Enterprise Server 12 SP1:openvswitch-kmp-default-2.1.2_k3.12.49_11-4.5.8 SUSE Linux Enterprise Server 12 SP1:openvswitch-kmp-xen-2.1.2_k3.12.49_11-4.5.8 SUSE Linux Enterprise Server 12 SP1:openvswitch-switch-2.1.2-4.5.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-24.15 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-24.15 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-24.15 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-24.15 SUSE Linux Enterprise Server 12 SP3:openvswitch-2.7.0-2.29 SUSE Linux Enterprise Server 12 SP4:libopenvswitch-2_8-0-2.8.4-3.36 SUSE Linux Enterprise Server 12 SP4:openvswitch-2.8.4-3.36 SUSE Linux Enterprise Server 12 SP5:libopenvswitch-2_11-0-2.11.1-1.75 SUSE Linux Enterprise Server 12 SP5:openvswitch-2.11.1-1.75 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-24.15 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-24.15 openSUSE Tumbleweed:libovn-21_09-0-21.09.1-1.1 openSUSE Tumbleweed:openvswitch-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-devel-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-devel-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-ovn-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-pki-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-switch-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-test-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-dpdk-vtep-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-ovn-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-pki-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-switch-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-test-2.6.1-2.1 openSUSE Tumbleweed:openvswitch-vtep-2.6.1-2.1 openSUSE Tumbleweed:ovn-21.09.1-1.1 openSUSE Tumbleweed:ovn-central-21.09.1-1.1 openSUSE Tumbleweed:ovn-devel-21.09.1-1.1 openSUSE Tumbleweed:ovn-doc-21.09.1-1.1 openSUSE Tumbleweed:ovn-docker-21.09.1-1.1 openSUSE Tumbleweed:ovn-host-21.09.1-1.1 openSUSE Tumbleweed:ovn-vtep-21.09.1-1.1 openSUSE Tumbleweed:python-openvswitch-2.6.1-2.1 openSUSE Tumbleweed:python-openvswitch-test-2.6.1-2.1 moderate 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P