Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0685. PoCs published by Uwe Ohse.
AI-analyzed exploit summary This exploit demonstrates a symbolic link attack against FCron, allowing an attacker to corrupt or delete user crontab files by predicting temporary file names. The PoC shows how a normal user can create a symlink to a root-owned crontab file, leading to its deletion when FCron processes the file.
Description
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.
Exploits (1)
This exploit demonstrates a symbolic link attack against FCron, allowing an attacker to corrupt or delete user crontab files by predicting temporary file names. The PoC shows how a normal user can create a symlink to a root-owned crontab file, leading to its deletion when FCron processes the file.