fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.

The remote host is affected by the vulnerability described in GLSA-201311-16 (fcron: Information disclosure)

    The fcrontab function contains a race condition relating to symlinks.
  Impact :

    A local attacker could perform symlink attacks to read arbitrary files       with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

Rebased fcron, this new version is mostly bugfixing, see referenced bug.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
71090	GLSA-201311-16 : fcron: Information disclosure	Nessus	Gentoo Local Security Checks	low
47336	Fedora 13 : fcron-3.0.5-1.fc13 (2010-4084)	Nessus	Fedora Local Security Checks	low
47335	Fedora 12 : fcron-3.0.5-1.fc12 (2010-4063)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2010-0792

medium

Tenable Plugins

low

low

low