CVEvulnerability

CVE-2004-1033

2.1 LOW Published 2005-03-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-03-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

Affected configurations

• thibault godouet fcron 2.0.1 • thibault godouet fcron 2.9.4 • gentoo linux

Referenced by CWE · observed example (2)

CWE-402 Transmission of Private Resources into a New Sphere weakness
CWE-403 Exposure of File Descriptor to Unintended Control Sphere weakness

References

http://security.gentoo.org/glsa/glsa-200411-27.xml security.gentoo.org
http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false www.idefense.com
http://www.securityfocus.com/bid/11684 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18078 exchange.xforce.ibmcloud.com
http://security.gentoo.org/glsa/glsa-200411-27.xml security.gentoo.org
http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false www.idefense.com
http://www.securityfocus.com/bid/11684 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18078 exchange.xforce.ibmcloud.com

CVE-2004-1033

Description

Affected configurations

Related

Referenced by CWE · observed example (2)

References