fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fcron | Thibault_godouet | 2.0.1 (including) | 2.0.1 (including) |
| Fcron | Thibault_godouet | 2.9.4 (including) | 2.9.4 (including) |
| Fcron | Ubuntu | dapper | * |
| Fcron | Ubuntu | devel | * |
| Fcron | Ubuntu | edgy | * |
| Fcron | Ubuntu | feisty | * |
References
- http://security.gentoo.org/glsa/glsa-200411-27.xml
- http://www.idefense.com/application/poi/display?id=157\u0026type=vulnerabilities\u0026flashstatus=false
- http://www.securityfocus.com/bid/11684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18075
- http://security.gentoo.org/glsa/glsa-200411-27.xml
- http://www.idefense.com/application/poi/display?id=157\u0026type=vulnerabilities\u0026flashstatus=false
- http://www.securityfocus.com/bid/11684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18075