Description
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
References
- 20041115 Multiple Security Vulnerabilities in Fcron third-party-advisory
- fcron-fcronsighup-obtain-info(18075) vdb-entry
- 11684 vdb-entry
- GLSA-200411-27 vendor-advisory