CVE-2012-3504 The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.
LowCVSS 3.6
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject crypto-utils | = 2.4.1-34 | No fix listed |
References
- [oss-security] 20121002 CVE-2012-3504: insecure temporary file usage in genkey perl script mailing-list
- 55756 vdb-entry
- bugzilla.redhat.com exploit
- cryptoutils-genkey-symlink(79016) vdb-entry