Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T00:39:00.608Z
Reserved: 2004-11-12T00:00:00
Link: CVE-2004-1033

No data.

Status : Deferred
Published: 2005-03-01T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2004-1033

No data.