Information disclosure in Freebsd

CVE-2011-1074

crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.

Vulnerability class: Information Disclosure

EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.