CVE-2010-0792
First published: Fri Mar 05 2010(Updated: )
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Thibault Godouet FCron | =2.9.2 | |
| Thibault Godouet FCron | =2.1.0 | |
| Thibault Godouet FCron | =2.9.6 | |
| Thibault Godouet FCron | =2.0.2 | |
| Thibault Godouet FCron | =2.9.1 | |
| Thibault Godouet FCron | =2.0.0 | |
| Thibault Godouet FCron | =3.0.3-rc1 | |
| Thibault Godouet FCron | =1.0.0 | |
| Thibault Godouet FCron | =0.8.0 | |
| Thibault Godouet FCron | <=3.0.4 | |
| Thibault Godouet FCron | =0.9.0 | |
| Thibault Godouet FCron | =2.9.4 | |
| Thibault Godouet FCron | =2.9.7 | |
| Thibault Godouet FCron | =2.9.0 | |
| Thibault Godouet FCron | =0.9.2.1 | |
| Thibault Godouet FCron | =3.0.2 | |
| Thibault Godouet FCron | =1.0.3 | |
| Thibault Godouet FCron | =0.9.3 | |
| Thibault Godouet FCron | =0.9.5 | |
| Thibault Godouet FCron | =2.9.3 | |
| Thibault Godouet FCron | =1.1.1 | |
| Thibault Godouet FCron | =0.8.1 | |
| Thibault Godouet FCron | =1.1.0 | |
| Thibault Godouet FCron | =3.0.3 | |
| Thibault Godouet FCron | =2.0.1 | |
| Thibault Godouet FCron | =2.9.5 | |
| Thibault Godouet FCron | =0.8.2 | |
| Thibault Godouet FCron | =1.0.1 | |
| Thibault Godouet FCron | =1.0.2 | |
| Thibault Godouet FCron | =3.0.0 | |
| Thibault Godouet FCron | =3.0.1 | |
| Thibault Godouet FCron | =0.9.4 | |
| Thibault Godouet FCron | =2.9.5.1 | |
| Thibault Godouet FCron | =0.9.1 |
Remedy
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/38796
- http://seclists.org/fulldisclosure/2010/Mar/97
- http://www.securityfocus.com/bid/38531
- http://securitytracker.com/id?1023677
- http://fcron.free.fr/
- http://www.osvdb.org/62718
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html
- http://secunia.com/advisories/39195
- http://www.vupen.com/english/advisories/2010/0730
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56680
- http://www.securityfocus.com/archive/1/509873/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/thibault godouet
- canonical/thibault godouet fcron
- version/thibault godouet fcron/2.9.2
- version/thibault godouet fcron/2.1.0
- version/thibault godouet fcron/2.9.6
- version/thibault godouet fcron/2.0.2
- version/thibault godouet fcron/2.9.1
- version/thibault godouet fcron/2.0.0
- version/thibault godouet fcron/3.0.3-rc1
- version/thibault godouet fcron/1.0.0
- version/thibault godouet fcron/0.8.0
- version/thibault godouet fcron/3.0.4
- version/thibault godouet fcron/0.9.0
- version/thibault godouet fcron/2.9.4
- version/thibault godouet fcron/2.9.7
- version/thibault godouet fcron/2.9.0
- version/thibault godouet fcron/0.9.2.1
- version/thibault godouet fcron/3.0.2
- version/thibault godouet fcron/1.0.3
- version/thibault godouet fcron/0.9.3
- version/thibault godouet fcron/0.9.5
- version/thibault godouet fcron/2.9.3
- version/thibault godouet fcron/1.1.1
- version/thibault godouet fcron/0.8.1
- version/thibault godouet fcron/1.1.0
- version/thibault godouet fcron/3.0.3
- version/thibault godouet fcron/2.0.1
- version/thibault godouet fcron/2.9.5
- version/thibault godouet fcron/0.8.2
- version/thibault godouet fcron/1.0.1
- version/thibault godouet fcron/1.0.2
- version/thibault godouet fcron/3.0.0
- version/thibault godouet fcron/3.0.1
- version/thibault godouet fcron/0.9.4
- version/thibault godouet fcron/2.9.5.1
- version/thibault godouet fcron/0.9.1