The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fedoraproject crypto-utils 2.4.1-34 |