CVE-2004-1032

2005-03-0105:00:00

mitre

web.nvd.nist.gov

fcron

vulnerability

local users

file deletion

file creation

security issue

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.

Affected configurations

Nvd

Node

thibault_godouetfcronMatch2.0.1

thibault_godouetfcronMatch2.9.4

Node

gentoolinux

VendorProductVersionCPE
thibault_godouetfcron2.0.1cpe:2.3:a:thibault_godouet:fcron:2.0.1:*:*:*:*:*:*:*
thibault_godouetfcron2.9.4cpe:2.3:a:thibault_godouet:fcron:2.9.4:*:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
thibault_godouet	fcron	2.0.1	cpe:2.3:a:thibault_godouet:fcron:2.0.1:::::::*
thibault_godouet	fcron	2.9.4	cpe:2.3:a:thibault_godouet:fcron:2.9.4:::::::*
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::