Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2004-11-24T05:00:00
Updated: 2024-08-08T00:39:00.608Z
Reserved: 2004-11-12T00:00:00
Link: CVE-2004-1033
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-03-01T05:00:00.000
Modified: 2024-11-20T23:49:57.143
Link: CVE-2004-1033
Redhat
No data.