Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

crypto-utils: symlink attack

Package(s):

crypto-utils

CVE #(s):

CVE-2012-3504

Created:

March 11, 2013

Updated:

March 13, 2013

Description:

From the CVE entry:

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.

Alerts:

Fedora	FEDORA-2013-3253	2013-03-11
Fedora	FEDORA-2013-3259	2013-03-11

(Log in to post comments)