Lucene search

K
mageiaGentoo FoundationMGASA-2013-0377
HistoryDec 19, 2013 - 2:57 a.m.

Updated fcron package fixes security vulnerability and init script

2013-12-1902:57:02
Gentoo Foundation
advisories.mageia.org
6

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file (CVE-2010-0792). An error in the init script as also been corrected.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchfcron< 3.0.6-1.1fcron-3.0.6-1.1.mga3

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%