Unscored severity · published Mar 1, 2005
CVE-2004-1033
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fcron · Thibault Godouet
2.0.1; 2.9.4 · source: NVD
LI
Linux · Gentoo
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1033
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200411-27.xml
www.idefense.com
http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false
Patch
http://www.securityfocus.com/bid/11684
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18078
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
Rsync: rsync server leaks arbitrary client files