CVE-2016-3992 | BDVDB-2026-77409 Detail

Description#

cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic.trace.$$ file in /tmp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/04/09/4
http://www.openwall.com/lists/oss-security/2016/04/10/2
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820331
http://lists.opensuse.org/opensuse-updates/2016-07/msg00013.html

Exploit#

No public exploit known

History#

Version 12016-07-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.