Description
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
References
- [oss-security] 20110228 Re: CVE request: FreeBSD/OS X crontab information leakage mailing-list
- 46604 vdb-entry
- 8117 third-party-advisory
- 20110228 FreeBSD crontab information leakage mailing-list
- freebsd-statcalls-info-disc(65900) vdb-entry
- [oss-security] 20110228 CVE request: FreeBSD/OS X crontab information leakage mailing-list
- 20110228 FreeBSD crontab information leakage mailing-list