ISOMAN

CVE

CVE-2011-1074

crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.

Severity
LOW
CVSS
1.9
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
FreeBSD15.0-RELEASE amd64 bootonlyunknownsource
FreeBSD15.0-RELEASE amd64 disc1unknownsource
FreeBSD15.0-RELEASE amd64 dvd1unknownsource
FreeBSD15.0-RELEASE amd64 memstickunknownsource
FreeBSD15.0-RELEASE amd64 mini-memstickunknownsource
FreeBSD15.0-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD15.0-RELEASE aarch64 pine64unknownsource
FreeBSD15.0-RELEASE aarch64 pinebookunknownsource
FreeBSD15.0-RELEASE aarch64 rock64unknownsource
FreeBSD15.0-RELEASE aarch64 rockpro64unknownsource
FreeBSD15.0-RELEASE aarch64 rpiunknownsource
FreeBSD15.0-RELEASE aarch64 bootonlyunknownsource
FreeBSD15.0-RELEASE aarch64 disc1unknownsource
FreeBSD15.0-RELEASE aarch64 dvd1unknownsource
FreeBSD15.0-RELEASE aarch64 memstickunknownsource
FreeBSD15.0-RELEASE aarch64 mini-memstickunknownsource
FreeBSD15.0-RELEASE powerpc64 bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64 disc1unknownsource
FreeBSD15.0-RELEASE powerpc64le bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64le disc1unknownsource
FreeBSD15.0-RELEASE riscv64 genericsdunknownsource
FreeBSD15.0-RELEASE riscv64 bootonlyunknownsource
FreeBSD15.0-RELEASE riscv64 disc1unknownsource
FreeBSD15.0-RELEASE riscv64 memstickunknownsource
FreeBSD15.0-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.4-RELEASE amd64 bootonlyunknownsource
FreeBSD14.4-RELEASE amd64 disc1unknownsource
FreeBSD14.4-RELEASE amd64 dvd1unknownsource
FreeBSD14.4-RELEASE amd64 memstickunknownsource
FreeBSD14.4-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.4-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.4-RELEASE aarch64 pine64unknownsource
FreeBSD14.4-RELEASE aarch64 pinebookunknownsource
FreeBSD14.4-RELEASE aarch64 rock64unknownsource
FreeBSD14.4-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.4-RELEASE aarch64 rpiunknownsource
FreeBSD14.4-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.4-RELEASE aarch64 disc1unknownsource
FreeBSD14.4-RELEASE aarch64 dvd1unknownsource
FreeBSD14.4-RELEASE aarch64 memstickunknownsource
FreeBSD14.4-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.4-RELEASE i386 bootonlyunknownsource
FreeBSD14.4-RELEASE i386 disc1unknownsource
FreeBSD14.4-RELEASE i386 dvd1unknownsource
FreeBSD14.4-RELEASE i386 memstickunknownsource
FreeBSD14.4-RELEASE i386 mini-memstickunknownsource
FreeBSD14.4-RELEASE powerpc bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc disc1unknownsource
FreeBSD14.4-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64 disc1unknownsource
FreeBSD14.4-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64le disc1unknownsource
FreeBSD14.4-RELEASE riscv64 genericsdunknownsource
FreeBSD14.4-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.4-RELEASE riscv64 disc1unknownsource
FreeBSD14.4-RELEASE riscv64 memstickunknownsource
FreeBSD14.4-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.3-RELEASE amd64 bootonlyunknownsource
FreeBSD14.3-RELEASE amd64 disc1unknownsource
FreeBSD14.3-RELEASE amd64 dvd1unknownsource
FreeBSD14.3-RELEASE amd64 memstickunknownsource
FreeBSD14.3-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.3-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.3-RELEASE aarch64 pine64unknownsource
FreeBSD14.3-RELEASE aarch64 pinebookunknownsource
FreeBSD14.3-RELEASE aarch64 rock64unknownsource
FreeBSD14.3-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.3-RELEASE aarch64 rpiunknownsource
FreeBSD14.3-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.3-RELEASE aarch64 disc1unknownsource
FreeBSD14.3-RELEASE aarch64 dvd1unknownsource
FreeBSD14.3-RELEASE aarch64 memstickunknownsource
FreeBSD14.3-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.3-RELEASE i386 bootonlyunknownsource
FreeBSD14.3-RELEASE i386 disc1unknownsource
FreeBSD14.3-RELEASE i386 dvd1unknownsource
FreeBSD14.3-RELEASE i386 memstickunknownsource
FreeBSD14.3-RELEASE i386 mini-memstickunknownsource
FreeBSD14.3-RELEASE powerpc bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc disc1unknownsource
FreeBSD14.3-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64 disc1unknownsource
FreeBSD14.3-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64le disc1unknownsource
FreeBSD14.3-RELEASE riscv64 genericsdunknownsource
FreeBSD14.3-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.3-RELEASE riscv64 disc1unknownsource
FreeBSD14.3-RELEASE riscv64 memstickunknownsource
FreeBSD14.3-RELEASE riscv64 mini-memstickunknownsource

References

  1. http://marc.info/?l=full-disclosure&m=129891323028897&w=2
  2. http://openwall.com/lists/oss-security/2011/02/28/14
  3. http://openwall.com/lists/oss-security/2011/02/28/6
  4. http://securityreason.com/securityalert/8117
  5. http://www.securityfocus.com/archive/1/516716/100/0/threaded
  6. http://www.securityfocus.com/bid/46604
  7. https://exchange.xforce.ibmcloud.com/vulnerabilities/65900
  8. http://marc.info/?l=full-disclosure&m=129891323028897&w=2
  9. http://openwall.com/lists/oss-security/2011/02/28/14
  10. http://openwall.com/lists/oss-security/2011/02/28/6
  11. http://securityreason.com/securityalert/8117
  12. http://www.securityfocus.com/archive/1/516716/100/0/threaded
  13. http://www.securityfocus.com/bid/46604
  14. https://exchange.xforce.ibmcloud.com/vulnerabilities/65900