CVE-2004-1030

2005-03-0105:00:00

mitre

web.nvd.nist.gov

cve-2004-1030

fcron

information disclosure

local users

security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.

Affected configurations

Nvd

Node

thibault_godouetfcronMatch2.0.1

thibault_godouetfcronMatch2.9.4

Node

gentoolinux

VendorProductVersionCPE
thibault_godouetfcron2.0.1cpe:2.3:a:thibault_godouet:fcron:2.0.1:*:*:*:*:*:*:*
thibault_godouetfcron2.9.4cpe:2.3:a:thibault_godouet:fcron:2.9.4:*:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
thibault_godouet	fcron	2.0.1	cpe:2.3:a:thibault_godouet:fcron:2.0.1:::::::*
thibault_godouet	fcron	2.9.4	cpe:2.3:a:thibault_godouet:fcron:2.9.4:::::::*
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::