Approved changes feed: RSS · Atom
cpe:2.3:a:thibault_godouet:fcron:2.9.4:*:*:*:*:*:*:*part: a version: 2.9.4 update: *
| Vendor | Thibault Godouet (2aa45053-e1e9-5772-a8cd-e9724d621b8c) |
|---|---|
| Product | Fcron (aee4f2e1-225e-5d0b-8744-ced4d4226899) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/yo8192/fcron |
purl2cpe | 2026-06-01 10:13:01.419812 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-0792 |
vulnerable | 2026-06-08 04:52:04.534341 |
Details available
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
Published: 2010-03-05T19:00:00.000Z
Updated: 2024-08-07T00:59:39.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1033 |
vulnerable | 2026-06-08 04:47:52.550705 |
Details available
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Published: 2004-11-24T05:00:00.000Z
Updated: 2024-08-08T00:39:00.608Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1032 |
vulnerable | 2026-06-08 04:47:52.550271 |
Details available
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
Published: 2004-11-24T05:00:00.000Z
Updated: 2024-08-08T00:39:00.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1031 |
vulnerable | 2026-06-08 04:47:52.549837 |
Details available
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.
Published: 2004-11-24T05:00:00.000Z
Updated: 2024-08-08T00:39:00.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1030 |
vulnerable | 2026-06-08 04:47:52.549401 |
Details available
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
Published: 2004-11-24T05:00:00.000Z
Updated: 2024-08-08T00:39:00.462Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.