Fcron

fcron

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0792 1Thibault Godouet 1Fcron Apr 29, 2026 Mar 5, 2010 N/A· v4 N/A· v3 1.9 LOW· v2 fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
CVE-2006-0575 1Thibault Godouet 1Fcron Apr 16, 2026 Feb 7, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion.
CVE-2006-0539 1Thibault Godouet 1Fcron Apr 16, 2026 Feb 4, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2...Show more The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can "overwrite some data."Show less
CVE-2004-1033 2Gentoo Thibault Godouet 2Fcron Linux Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
CVE-2004-1032 2Gentoo Thibault Godouet 2Fcron Linux Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such...Show more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.Show less
CVE-2004-1031 2Gentoo Thibault Godouet 2Fcron Linux Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configur...Show more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.Show less
CVE-2004-1030 2Gentoo Thibault Godouet 2Fcron Linux Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be pars...Show more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.Show less
CVE-2001-0685 1Thibault Godouet 1Fcron Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 2.6 LOW· v2 Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.