crypto-utils: symlink attack
| Package(s): | crypto-utils | CVE #(s): | CVE-2012-3504 | ||||||||
| Created: | March 11, 2013 | Updated: | March 13, 2013 | ||||||||
| Description: | From the CVE entry:
The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory. | ||||||||||
| Alerts: |
| ||||||||||