low2.1
CVE-2012-6110
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job…
Impact
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bcron Project | Bcron Exec | through 0.09 Versions 0.04, 0.05, 0.06, 0.07, 0.08 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2013/q1/102
- http://untroubled.org/bcron/NEWS
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81383
- http://seclists.org/oss-sec/2013/q1/102
- http://untroubled.org/bcron/NEWS
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81383