Description
convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion.
References
- 22905 vdb-entry
- 25693 vdb-entry
- fcron-dotdot-directory-traversal(24504) vdb-entry
- 2006-0006 vendor-advisory
- ADV-2006-0435 vdb-entry
- 18719 third-party-advisory
- 20060202 Re: Fcrontab - memory corruption on heap. mailing-list