CVE-2012-3449: Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/...

Security readout for executives and security teams

Open vSwitch 1.4.2 used unsafe permissions on two PKI incoming directories. A local user on the same host could delete or overwrite files through those directories, creating risk of service disruption or privilege escalation. The provided sources do not show remote exploitation or active exploitation. Exposure is most likely on legacy systems running Open vSwitch 1.4.2 with those PKI directories present. Risk is higher where untrusted or low-privileged local users have shell or process access to the host. Treat as a legacy infrastructure hygiene issue with meaningful local escalation and disruption risk. Prioritize systems hosting shared users, virtualization networking, or sensitive workloads, but do not treat it as internet-scale emergency based on the provided evidence. Mitigation focus: Inventory hosts for Open vSwitch 1.4.2 installations.; Check vendor or distribution advisories for the supported fixed package path.; Remove unnecessary local user access on affected hosts..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.