CVE-2012-3504

no score yetEPSS 0.5%

The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2012-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:crypto-utils

References

http://www.openwall.com/lists/oss-security/2012/10/02/3
http://www.securityfocus.com/bid/55756
https://bugzilla.redhat.com/show_bug.cgi?id=849256
https://exchange.xforce.ibmcloud.com/vulnerabilities/79016
http://www.openwall.com/lists/oss-security/2012/10/02/3

Check your stack JSON