CVE-2009-3589

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond…

published October 8, 2009

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Published
2009-10-08T15:00Z
EPSS history
Timeline
  • 08 OCT 15:00Z
    incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond…
    cvelistv5