openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - opencryptoki: insecure handling of files in the /tmp directory (CVE-2012-4455)

  - openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable     permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in     /tmp. (CVE-2012-4454)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - opencryptoki: insecure handling of files in the /tmp directory (CVE-2012-4455)

  - openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable     permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in     /tmp. (CVE-2012-4454)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

openCryptoki had insecure lock file handling, which might have allowed local users with pkcs11 privileges to look at other local users pkcs11 credentials.

Some additional small fixes in pkcsslotd were fixed :

  - Set pkcsslotd pid to /var/run/pkcsslotd.pid

  - Removed spurious '-' before no-header option on ps

  - Sending output of pkcs11_startup to syslog via logger

ID	Name	Product	Family	Severity
199065	RHEL 5 : opencryptoki (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199043	RHEL 4 : opencryptoki (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
64210	SuSE 11.2 Security Update : openCryptoki (SAT Patch Number 7053)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2012-4455

critical

Tenable Plugins

critical

critical

medium