CVE-2010-0792: Low severity Thibault Godouet FCron vulnerability
Published Mar 5, 2010
·Updated
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
Affected Software
34 affected components
Thibault Godouet FCron=2.9.2
Thibault Godouet FCron=2.1.0
Thibault Godouet FCron=2.9.6
Thibault Godouet FCron=2.0.2
Thibault Godouet FCron=2.9.1
Thibault Godouet FCron=2.0.0
Thibault Godouet FCron=3.0.3-rc1
Thibault Godouet FCron=1.0.0
Thibault Godouet FCron=0.8.0
Thibault Godouet FCron<=3.0.4
Thibault Godouet FCron=0.9.0
Thibault Godouet FCron=2.9.4
Thibault Godouet FCron=2.9.7
Thibault Godouet FCron=2.9.0
Thibault Godouet FCron=0.9.2.1
Thibault Godouet FCron=3.0.2
Thibault Godouet FCron=1.0.3
Thibault Godouet FCron=0.9.3
Thibault Godouet FCron=0.9.5
Thibault Godouet FCron=2.9.3
Thibault Godouet FCron=1.1.1
Thibault Godouet FCron=0.8.1
Thibault Godouet FCron=1.1.0
Thibault Godouet FCron=3.0.3
Thibault Godouet FCron=2.0.1
Thibault Godouet FCron=2.9.5
Thibault Godouet FCron=0.8.2
Thibault Godouet FCron=1.0.1
Thibault Godouet FCron=1.0.2
Thibault Godouet FCron=3.0.0
Thibault Godouet FCron=3.0.1
Thibault Godouet FCron=0.9.4
Thibault Godouet FCron=2.9.5.1
Thibault Godouet FCron=0.9.1
Remediation
Patch Available
Patch Available
Event History
Mar 5, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0792?
CVE-2010-0792 is classified as a medium-severity vulnerability due to its potential for local exploitation.
2
How do I fix CVE-2010-0792?
To fix CVE-2010-0792, upgrade to fcron version 3.0.5 or later, which has addressed this symlink attack issue.
3
Who is affected by CVE-2010-0792?
CVE-2010-0792 affects local users on systems running vulnerable versions of fcron prior to 3.0.5.
4
What type of attack is associated with CVE-2010-0792?
CVE-2010-0792 is associated with a symlink attack that allows local users to read arbitrary files.
5
What software is vulnerable to CVE-2010-0792?
Vulnerable software includes multiple versions of fcron prior to version 3.0.5, including versions 0.8.0 through 2.9.7.