CVE-2011-1074 crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal....
LowCVSS 1.9
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | All versions | No fix listed |
References
- 20110228 FreeBSD crontab information leakage exploit mailing-list
- [oss-security] 20110228 Re: CVE request: FreeBSD/OS X crontab information leakage exploit mailing-list
- [oss-security] 20110228 CVE request: FreeBSD/OS X crontab information leakage exploit mailing-list
- 8117 third-party-advisory
- 20110228 FreeBSD crontab information leakage mailing-list
- 46604 vdb-entry
- freebsd-statcalls-info-disc(65900) vdb-entry
- Debian Security Tracker CVE-2011-1074 vendor-advisory