The genkey script, as provided in the crypto-utils package, suffers from poor temporary file handling. When executed, it writes to a file called 'list' in the current working directory, without first checking to see if the file exists. If an attacker were able to coerce the root user into running the genkey script from a specific directory containing a symbolic link, the linked file would be overwritten.

This flaw only exists in genkey as provided by Red Hat Enterprise Linux 6 and Fedora. Earlier versions of genkey, such as that provided with Red Hat Enterprise Linux 5 do not contain the vulnerable function (nssconfigFound()).