CVE-2004-1033

No fix known EPSS <1%

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

Published 2004-11-24 · CVE record · OSV

Products: thibault_godouet fcron, gentoo linux