Linux Distros Unpatched Vulnerability : CVE-2012-3504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the list file in the...

RHEL 6 : crypto-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - crypto-utils: insecure temporary file usage in genkey CVE-2012-3504 Note that Nessus has not tested for this issue...

Fedora Update for crypto-utils FEDORA-2013-3253

Check for the Version of crypto-utils OpenVAS Vulnerability Test Fedora Update for crypto-utils FEDORA-2013-3253 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for crypto-utils FEDORA-2013-3259

Check for the Version of crypto-utils OpenVAS Vulnerability Test Fedora Update for crypto-utils FEDORA-2013-3259 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora 17 : crypto-utils-2.4.1-39.fc17 (2013-3259)

Address CVE-2012-3504 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 18 : crypto-utils-2.4.1-39.fc18 (2013-3253)

Addresses CVE-2012-3504 - insecure temporary file usage in genkey Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2012-3504

CVE-2012-3504 affects crypto-utils package (genkey.pl) with insecure temporary file handling: nssconfigFound allows a local user to create/overwrite files via a symlink attack on the list file in the current directory. Affected version historically is crypto-utils 2.4.1-34; Fedora/RHEL advisories...