CVE-2012-4455

CVE-2012-4455 describes a local privilege escalation vulnerability in openCryptoki 2.4.1. An attacker can exploit a symlink race condition on lock files in /var/lock/ to create or modify arbitrary files with world-writable permissions. This vulnerability has a CVSS score of 6.2, indicating high impact on confidentiality, integrity, and availability, but requires high attack complexity and local access. There is no known public exploit code, active exploitation, or significant community discussion surrounding this CVE.