Security Advisory
CVE-2012-3504
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory.