Secunia Logo
 
CVE Reference: CVE-2004-1031
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-1031

Description:
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/18076

IDEFENSE
  http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false

GENTOO
  http://security.gentoo.org/glsa/glsa-200411-27.xml

BID
  11684


Return to the previous page.