Home > Vulnerability Database > CVE-2004-1033

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2004-1033

Date: November 24, 2004

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

Severity Score

4.0

Related Resources (7)

Url: https://nvd.nist.gov/vuln/detail/CVE-2004-1033

Url: http://www.securityfocus.com/bid/11684

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/18078

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2004-1033

Url: http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false

Url: http://security.gentoo.org/glsa/glsa-200411-27.xml

Url: https://www.mend.io/vulnerability-database/CVE-2004-1033

Severity Score

4.0

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us