Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic.trace.$$ file in /tmp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
cronic 安全漏洞
Vulnerability Description
cronic是软件开发者Daniel Lange所负责维护的一个用于包装cron作业以防止多余的电子邮件发送的shell脚本。 cronic 3之前的版本中存在安全漏洞。本地攻击者可通过对/tmp目录下的文件(cronic.out.$$、cronic.err.$$或cronic.trace.$$)实施符号链接攻击利用该漏洞写入任意文件。
CVSS Information
N/A
Vulnerability Type
N/A