EUVD-2012-3459

Malware in sbrugna...

CVE-2012-3504

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory...

Directory traversal

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory...

CVE-2012-3504

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory...

CVE-2012-3504

CVE-2012-3504 affects crypto-utils package (genkey.pl) with insecure temporary file handling: nssconfigFound allows a local user to create/overwrite files via a symlink attack on the list file in the current directory. Affected version historically is crypto-utils 2.4.1-34; Fedora/RHEL advisories...