{"action":"Upgrade openvswitch to 1.4.2+git20120612-8 or later.","affected":[{"fixed":"1.4.2+git20120612-8","introduced":"0"}],"component":"openvswitch","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.4.2+git20120612-8"],"id":"tcs_01M5NA34RD7DFEVHF90CGJC39G","modified_at":"2026-10-23T17:47:40.791783807Z","published_at":"2012-08-07T20:55:03.780Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-3449","https://security-tracker.debian.org/tracker/CVE-2012-3449"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-3449","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-3449"}],"summary":"Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and o"}