CVE-2010-0792

https://notcve.org/view.php?id=CVE-2010-0792

fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file. fcrontab en fcron anteriores a v3.0.5 permite a usuarios locales leer ficheros arbitrarios a traves de un ataque de enlace simbolico en un fichero sin especificar. • http://fcron.free.fr http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html http://seclists.org/fulldisclosure/2010/Mar/97 http://secunia.com/advisories/38796 http://secunia.com/advisories/39195 http://securitytracker.com/id?1023677 http://www.osvdb.org/62718 http://www.securityfocus.com/archive/1/509873/100/0/threaded http://www.securityfocus.com/bid/38531 http://www.vupen.com/english/advisories/2010/0730 https://exchange.xforce.ibmcloud.com/vulner • CWE-59: Improper Link Resolution Before File Access ('Link Following') •