CVE-2010-0792

fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
Link Following
Severity
UNKNOWN
AV:L/AC:M/Au:N/C:P/I:N/A:N
Atk. Vector
LOCAL
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
thibault_godouetfcron
𝑥
≤ 3.0.4
thibault_godouetfcron
0.8.0
thibault_godouetfcron
0.8.1
thibault_godouetfcron
0.8.2
thibault_godouetfcron
0.9.0
thibault_godouetfcron
0.9.1
thibault_godouetfcron
0.9.2.1
thibault_godouetfcron
0.9.3
thibault_godouetfcron
0.9.4
thibault_godouetfcron
0.9.5
thibault_godouetfcron
1.0.0
thibault_godouetfcron
1.0.1
thibault_godouetfcron
1.0.2
thibault_godouetfcron
1.0.3
thibault_godouetfcron
1.1.0
thibault_godouetfcron
1.1.1
thibault_godouetfcron
2.0.0
thibault_godouetfcron
2.0.1
thibault_godouetfcron
2.0.2
thibault_godouetfcron
2.1.0
thibault_godouetfcron
2.9.0
thibault_godouetfcron
2.9.1
thibault_godouetfcron
2.9.2
thibault_godouetfcron
2.9.3
thibault_godouetfcron
2.9.4
thibault_godouetfcron
2.9.5
thibault_godouetfcron
2.9.5.1
thibault_godouetfcron
2.9.6
thibault_godouetfcron
2.9.7
thibault_godouetfcron
3.0.0
thibault_godouetfcron
3.0.1
thibault_godouetfcron
3.0.2
thibault_godouetfcron
3.0.3
thibault_godouetfcron
3.0.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://fcron.free.fr/
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html
http://seclists.org/fulldisclosure/2010/Mar/97
http://secunia.com/advisories/38796
http://secunia.com/advisories/39195
http://securitytracker.com/id?1023677
http://www.osvdb.org/62718
http://www.securityfocus.com/archive/1/509873/100/0/threaded
http://www.securityfocus.com/bid/38531
http://www.vupen.com/english/advisories/2010/0730
https://exchange.xforce.ibmcloud.com/vulnerabilities/56680