Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fcron 文件内容泄露漏洞
Vulnerability Description
Fcron是一款命令执行调度程序，可代替Vixie Cron使用。 Fcron包含的fcronsighup程序存在问题，本地攻击者可以利用这个漏洞查看ROOT属主的文件内容。 fcronsighup是setuid root属性程序，当ROOT属主的文件名传递给程序时，会作为配置文件解析，任何一行不能解析的内容会作为错误信息输出，因此利用root属主文件作为参数，可泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A