Vulnerability in Gentoo Linux
CVE-2004-1032
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Linux
- Thibault_godouet Fcron — versions 2.0.1, 2.9.4
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)