CVE-2012-3504
First published: Fri Aug 17 2012(Updated: )
The genkey script, as provided in the crypto-utils package, suffers from poor temporary file handling. When executed, it writes to a file called 'list' in the current working directory, without first checking to see if the file exists. If an attacker were able to coerce the root user into running the genkey script from a specific directory containing a symbolic link, the linked file would be overwritten. This flaw only exists in genkey as provided by Red Hat Enterprise Linux 6 and Fedora. Earlier versions of genkey, such as that provided with Red Hat Enterprise Linux 5 do not contain the vulnerable function (nssconfigFound()).
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fedoraproject Crypto-utils | =2.4.1-34 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2012/10/02/3
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=862430
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=659066&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=659066&action=edit
- https://access.redhat.com/security/cve/cve-2012-3504
- https://bugzilla.redhat.com/show_bug.cgi?id=849256
- http://www.securityfocus.com/bid/55756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79016
- collector/redhat-bugzilla
- alias/CVE-2012-3504
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/fedoraproject
- canonical/fedoraproject crypto-utils
- version/fedoraproject crypto-utils/2.4.1-34