CVE-2011-1073
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the...
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
Exploit likelihood
What each source reports
NVD Score used
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
- Record
CVE-2011-1073- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
- Record
CVE-2011-1073- Updated
- 2026-11-02
EUVDEUVD-2011-1088No score
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
- Record
EUVD-2011-1088- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjp2-4rww-387pNo score
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the...
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
- Record
GHSA-cjp2-4rww-387p- Weakness
- CWE-59
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1073 is a low vulnerability (CVSS 1.9) in Apple Mac Os X, published March 4, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/65899
openwall.com/lists/oss-security/2011/02/28/14
securityfocus.com/bid/46604
securityreason.com/securityalert/8117
marc.info?l=full-disclosure&m=129891323028897&w=2
nvd.nist.gov/vuln/detail/CVE-2011-1073
github.com/advisories/GHSA-cjp2-4rww-387p