CVE-2004-1033
N/A
N/A
Summary
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false
- http://www.securityfocus.com/bid/11684
- http://security.gentoo.org/glsa/glsa-200411-27.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18078
References
- http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false
- http://www.securityfocus.com/bid/11684
- http://security.gentoo.org/glsa/glsa-200411-27.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18078
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.