Lucene search

[email protected]CVE-2001-0685

HistorySep 20, 2001 - 4:00 a.m.

CVE-2001-0685

2001-09-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0685

fcron 1.1.1

crontab file

symlink attack

nvd

7.1 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user’s crontab file via a symlink attack on the fcrontab temporary file.

CPENameOperatorVersion
thibault_godouet:fcronthibault godouet fcroneq1.0
thibault_godouet:fcronthibault godouet fcroneq1.0.3
thibault_godouet:fcronthibault godouet fcroneq1.1.0
thibault_godouet:fcronthibault godouet fcroneq1.0.1
thibault_godouet:fcronthibault godouet fcroneq1.0.2

CPE	Name	Operator	Version
thibault_godouet:fcron	thibault godouet fcron	eq	1.0
thibault_godouet:fcron	thibault godouet fcron	eq	1.0.3
thibault_godouet:fcron	thibault godouet fcron	eq	1.1.0
thibault_godouet:fcron	thibault godouet fcron	eq	1.0.1
thibault_godouet:fcron	thibault godouet fcron	eq	1.0.2

References

fcron.free.fr/CHANGES.html

marc.info/?l=bugtraq&m=98339581702282&w=2

www.securityfocus.com/bid/2835

exchange.xforce.ibmcloud.com/vulnerabilities/7127

7.1 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON