CVE-2012-3504: Low severity Fedoraproject Crypto-utils vulnerability
The genkey script, as provided in the crypto-utils package, suffers from poor temporary file handling. When executed, it writes to a file called 'list' in the current working directory, without first checking to see if the file exists. If an attacker were able to coerce the root user into running the genkey script from a specific directory containing a symbolic link, the linked file would be overwritten.
This flaw only exists in genkey as provided by Red Hat Enterprise Linux 6 and Fedora. Earlier versions of genkey, such as that provided with Red Hat Enterprise Linux 5 do not contain the vulnerable function (nssconfigFound()).
Other sources
The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3504?
CVE-2012-3504 has a moderate severity due to its potential for privilege escalation through poor temporary file handling.
How do I fix CVE-2012-3504?
To fix CVE-2012-3504, update the crypto-utils package to a version where the temporary file handling is addressed.
What systems are affected by CVE-2012-3504?
CVE-2012-3504 primarily affects systems running the crypto-utils version 2.4.1-34 from the Fedora project.
Can CVE-2012-3504 be exploited remotely?
CVE-2012-3504 requires local access to the system, making it less likely to be exploited remotely.
What is the impact of CVE-2012-3504?
The impact of CVE-2012-3504 includes the potential for an attacker to create or overwrite critical files, leading to denial of service or privilege escalation.