Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-11-24T05:00:00

Updated: 2024-08-08T00:39:00.608Z

Reserved: 2004-11-12T00:00:00

Link: CVE-2004-1033

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-03-01T05:00:00.000

Modified: 2017-07-11T01:30:40.700

Link: CVE-2004-1033

cve-icon Redhat

No data.