CVE-2011-1074

Published: Mar 4, 2011Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.

Affected (1)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://marc.info/?l=full-disclosure&m=129891323028897&w=2

Source: secalert@redhat.com

Exploit

http://openwall.com/lists/oss-security/2011/02/28/14

Source: secalert@redhat.com

Exploit

http://openwall.com/lists/oss-security/2011/02/28/6

Source: secalert@redhat.com

Exploit

http://securityreason.com/securityalert/8117

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/516716/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46604

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65900

Source: secalert@redhat.com

http://marc.info/?l=full-disclosure&m=129891323028897&w=2