CVE-2001-0685 Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.
LowCVSS 2.6
EPSS 0.77%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thibault godouet fcron | = 1.0 | No fix listed |
| thibault godouet fcron | = 1.0.1 | No fix listed |
| thibault godouet fcron | = 1.0.2 | No fix listed |
| thibault godouet fcron | = 1.0.3 | No fix listed |
| thibault godouet fcron | = 1.1.0 | No fix listed |
References
- fcron.free.fr
- 20010228 fcron 0.9.5 is vulnerable to a symlink attack mailing-list
- 2835 exploit patch vdb-entry vendor-advisory
- fcron-tmpfile-symlink(7127) vdb-entry