CVE-2012-3504

crypto-utils 2.4.1-34 - Arbitrary File Overwrite via Symlink Attack on List File

Title source: llm

Description

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.

References (4)

Core 4

Core References

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2012/10/02/3

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/55756

Exploit x_refsource_misc

https://bugzilla.redhat.com/show_bug.cgi?id=849256

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/79016

Scores

EPSS 0.0046

EPSS Percentile 37.4%

Details

CWE

CWE-264

Status published

Products (1)

fedoraproject/crypto-utils 2.4.1-34

Published Oct 10, 2012

Tracked Since Feb 18, 2026