Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fcron 信息泄露漏洞
Vulnerability Description
Fcron是一款命令执行调度程序，可代替Vixie Cron使用。 Fcron包含的fcrontab程序存在设计问题，本地攻击者可以利用这个漏洞查看fcron.allow和fcron.deny文件内容。 问题是由于Fcron泄露/etc/fcron.allow和/etc/fcron.deny打开的文件描述符给调用的编辑器。这些文件的默认权限不允许非特权用户读取： rw-r----- 1 root fcron 253 Jul 29 12:45 /etc/fcron.allow -rw-r----- 1 ro
CVSS Information
N/A
Vulnerability Type
N/A