Description (CNA)
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://koji.fedoraproject.org/koji/buildinfo?buildID=134880
- https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5
ADP enrichment
No English description supplied.