3.7 - CVE-2011-1075

Executive Summary

Informations
Name	CVE-2011-1075	First vendor Publication	2021-10-19
Vendor	Cve	Last vendor Modification	2021-11-29

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Overall CVSS Score	3.7
Base Score	3.7	Environmental Score	3.7
impact SubScore	1.4	Temporal Score	3.7
Exploitabality Sub Score	2.2

Attack Vector	Network	Attack Complexity	High
Privileges Required	None	User Interaction	None
Scope	Unchanged	Confidentiality Impact	Low
Integrity Impact	None	Availability Impact	None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File() function, which takes a pathname as an argument, and is called with euid 0. A race condition in this process may lead to an arbitrary MD5 comparison regardless of the read permissions.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1075

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-362	Race Condition

CPE : Common Platform Enumeration

Type	Description	Count
Os	Freebsd cpe:2.3:o:freebsd:freebsd:-:::::::*	1

Open Source Vulnerability Database (OSVDB)

Id	Description
75011	crontab crontab.c Temporary File Symlink Arbitrary MD5 Hash Comparison

Sources (Detail)

Source	Url
CONFIRM	https://security.netapp.com/advisory/ntap-20211125-0004/
MISC	https://marc.info/?l=full-disclosure&m=129891323028897&w=2 https://www.openwall.com/lists/oss-security/2011/02/28/14