PT-2010-1146 · Fcron · Fcron

Dan Rosenberg · Published 2010-03-05 · Updated 2018-10-10 · CVE-2010-0792

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions fcron versions prior to 3.0.5

Description The issue allows local users to read arbitrary files, potentially leading to a breach of protected information. This can be achieved through a symlink attack on an unspecified file. The exploitation of this issue can be performed locally.

Recommendations For versions prior to 3.0.5, update to version 3.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2015-09690

CVE-2010-0792

MGASA-2013-0377

Affected Products

Fcron

References · 18

• https://bdu.fstec.ru/vul/2015-09690 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html · Vendor Advisory
• http://secunia.com/advisories/38796 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0792 · Security Note
• http://securityfocus.com/bid/38531 · Patch
• http://fcron.free.fr · Patch
• https://advisories.mageia.org/MGASA-2013-0377.html · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0377 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=11784 · Note
• http://osvdb.org/62718 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56680 · Note
• http://secunia.com/advisories/39195 · Note
• http://securityfocus.com/archive/1/509873/100/0/threaded · Note
• http://seclists.org/fulldisclosure/2010/Mar/97 · Note