CVE-2011-1074
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary...
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
Exploit likelihood
What each source reports
NVD Score used
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
- Record
CVE-2011-1074- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
- Record
CVE-2011-1074- Updated
- 2026-11-02
EUVDEUVD-2011-1089 No score
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
- Record
EUVD-2011-1089- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qm89-39pm-99vj No score
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary...
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
- Record
GHSA-qm89-39pm-99vj- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1074 is a low vulnerability (CVSS 1.9) in Freebsd, published March 4, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2011/02/28/14
securityfocus.com/bid/46604
securityreason.com/securityalert/8117
exchange.xforce.ibmcloud.com/vulnerabilities/65900
marc.info?l=full-disclosure&m=129891323028897&w=2
nvd.nist.gov/vuln/detail/CVE-2011-1074
github.com/advisories/GHSA-qm89-39pm-99vj