Unscored CVE-2011-1073 EUVD-2011-1088GHSA-cjp2-4rww-387p

crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attac…

Published Mar 4, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.

References

freebsd-realpath-info-disc(65899) vdb-entry
[oss-security] 20110228 Re: CVE request: FreeBSD/OS X crontab information leakage mailing-list
46604 vdb-entry
8117 third-party-advisory
20110228 FreeBSD crontab information leakage mailing-list
[oss-security] 20110228 CVE request: FreeBSD/OS X crontab information leakage mailing-list
20110228 FreeBSD crontab information leakage mailing-list