NVD

Id
45096  
Name
CVE-2012-3504  
Description
The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2012-10-11  
Seq
2012-3504  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226237 45096 CVE-2012-3504 [oss-security] 20121002 CVE-2012-3504: insecure temporary file usage in genkey perl script  View
226238 45096 CVE-2012-3504 55756  View
226239 45096 CVE-2012-3504 cryptoutils-genkey-symlink(79016)  View
226240 45096 CVE-2012-3504 https://bugzilla.redhat.com/show_bug.cgi?id=849256  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29216 JVNDB-2012-004923 crypto-utils の genkey.pl における任意のファイルを上書きされる脆弱性 crypto-utils の genkey.pl 内の nssconfigFound 関数には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2012-3504 56742 CVE-2012-3504 45096 3.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004923.html 2012-10-10 2012-10-15 View