CVE-2004-1033 | BDVDB-2026-7418 Detail

Description#

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false
http://www.securityfocus.com/bid/11684
http://security.gentoo.org/glsa/glsa-200411-27.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/18078

Exploit#

No public exploit known

History#

Version 12004-11-24Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.