Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openvswitch | Openvswitch | 1.4.2 (including) | 1.4.2 (including) |
| Openvswitch | Ubuntu | natty | * |
| Openvswitch | Ubuntu | oneiric | * |
| Openvswitch | Ubuntu | precise | * |
| Openvswitch | Ubuntu | upstream | * |