• info
• discussion
• exploit
• solution
• references

Crontab File Disclosure Vulnerability

Solution:
FreeBSD patch obtained from OpenBSD (Todd Miller <millert@openbsd.org>)


Debian Linux 2.2

• Debian 2.2 i386 cron_3.0pl1-57.2_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/cron_ 3.0pl1-57.2_i386.deb

FreeBSD FreeBSD 3.0

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.1

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.2

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.3

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.4

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.5

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 3.5.1

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 4.0 alpha

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 4.0

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 4.1

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch

FreeBSD FreeBSD 4.1.1

• FreeBSD 4.x crontab-4.x.patch
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:09/crontab-4.x.pa tch