Total vulnerabilities in the database
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
Software | From | Fixed in |
---|---|---|
thibault_godouet / fcron | 2.9.4 | 2.9.4.x |
thibault_godouet / fcron | 2.0.1 | 2.0.1.x |
gentoo / linux | - | - |