CVE Database
/

CVE-2004-1033

Back to search

CVE-2004-1033

Published: Nov 24, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

VendorProductVersions

n/a

n/a

affected
n/a

References

20041115 Multiple Security Vulnerabilities in Fcron
third-party-advisory
x_refsource_IDEFENSE
11684
vdb-entry
x_refsource_BID
GLSA-200411-27
vendor-advisory
x_refsource_GENTOO
fcron-fcrontab-obtain-info(18078)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now