CVSS: 1.9EPSS: 0%CPEs: 34EXPL: 0CVE-2010-0792
https://notcve.org/view.php?id=CVE-2010-0792
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file. fcrontab en fcron anteriores a v3.0.5 permite a usuarios locales leer ficheros arbitrarios a traves de un ataque de enlace simbolico en un fichero sin especificar. • http://fcron.free.fr http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html http://seclists.org/fulldisclosure/2010/Mar/97 http://secunia.com/advisories/38796 http://secunia.com/advisories/39195 http://securitytracker.com/id?1023677 http://www.osvdb.org/62718 http://www.securityfocus.com/archive/1/509873/100/0/threaded http://www.securityfocus.com/bid/38531 http://www.vupen.com/english/advisories/2010/0730 https://exchange.xforce.ibmcloud.com/vulner • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 2.6EPSS: 0%CPEs: 5EXPL: 2CVE-2001-0685 – Thibault Godouet FCron 1 - Symbolic Link
https://notcve.org/view.php?id=CVE-2001-0685
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file. • https://www.exploit-db.com/exploits/20905 http://fcron.free.fr/CHANGES.html http://marc.info/?l=bugtraq&m=98339581702282&w=2 http://www.securityfocus.com/bid/2835 https://exchange.xforce.ibmcloud.com/vulnerabilities/7127 •