CVE-2009-3589

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

🔗 References (4)

• cve@mitrehttp://koji.fedoraproject.org/koji/buildinfo?buildID=134880
• cve@mitrehttps://admin.fedoraproject.org/updates/incron-0.5.5-2.el5
• af854a3a-2127-422b-91ae-364da2661108http://koji.fedoraproject.org/koji/buildinfo?buildID=134880
• af854a3a-2127-422b-91ae-364da2661108https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5