Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fcron文件删除和空文件建立漏洞
Vulnerability Description
Fcron是一款命令执行调度程序，可代替Vixie Cron使用。 Fcron包含的fcronsighup程序存在设计问题，本地攻击者可以利用这个漏洞删除任意文件或建立空文件。 问题存在于fcronsighup工具处理fcron守护程序的信号时，fcronsighup从配置文件中读取值来命名建立的文件，文件使用O_RDWR|O_CREAT open()函数和0644参数以root用户权限来建立，过一段时间后，文件会被删除，文件名字符串由如下代码生成： snprintf(sigfile， sizeof(si
CVSS Information
N/A
Vulnerability Type
N/A