medium4.6
CVE-2009-3589
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supp…
Impact
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inotify | Incron | Version 0.5.5 |