CVSS: 5.5EPSS: 0%CPEs: 34EXPL: 0CVE-2010-0792 – Gentoo Linux Security Advisory 201311-16
https://notcve.org/view.php?id=CVE-2010-0792
05 Mar 2010 — fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file. fcrontab en fcron anteriores a v3.0.5 permite a usuarios locales leer ficheros arbitrarios a traves de un ataque de enlace simbolico en un fichero sin especificar. A vulnerability has been found in fcron, allowing local attackers to conduct symlink attacks. Versions less than 3.0.5-r2 are affected. • http://fcron.free.fr • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1030
https://notcve.org/view.php?id=CVE-2004-1030
24 Nov 2004 — fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message. • http://security.gentoo.org/glsa/glsa-200411-27.xml •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1031
https://notcve.org/view.php?id=CVE-2004-1031
24 Nov 2004 — fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ. • http://security.gentoo.org/glsa/glsa-200411-27.xml •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1032
https://notcve.org/view.php?id=CVE-2004-1032
24 Nov 2004 — fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string. • http://security.gentoo.org/glsa/glsa-200411-27.xml •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1033
https://notcve.org/view.php?id=CVE-2004-1033
24 Nov 2004 — Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable. • http://security.gentoo.org/glsa/glsa-200411-27.xml •