Unscored severity · published Mar 4, 2011
CVE-2011-1073
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary…
–
CVSS
0.4%
EPSS
No
On KEV
Description
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
All versions, or not specified · source: NVD
MO
Mac OS X · Apple
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1073
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1073
Exploit
http://marc.info/?l=full-disclosure&m=129891323028897&w=2
Exploit
http://openwall.com/lists/oss-security/2011/02/28/14
Exploit
http://openwall.com/lists/oss-security/2011/02/28/6
securityreason.com
http://securityreason.com/securityalert/8117
www.securityfocus.com
http://www.securityfocus.com/archive/1/516716/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/46604
More from Mac OS X
9.8
CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
8.8
CVE-2022-2294
WebRTC Heap Buffer Overflow Vulnerability
8.8
CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability