convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via .. sequences and a symlink attack on the temporary file that is used during conversion.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Fcron | Thibault_godouet | 2.9.5 (including) | 2.9.5 (including) |
Fcron | Thibault_godouet | 3.0.0 (including) | 3.0.0 (including) |