CVE-2004-1031 - CVE House
Back to Database
Status published High CVE-2004-1031

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows...

Vulnerability Description

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1031

Credits & Attribution

No credits recorded in the NVD database.

References

More from thibault godouet

View All →
CVE-2010-0792
fcrontab in fcron before 3.0.5 allows local users to read...
Low 1.9
CVE-2006-0575
convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to...
Medium 5
CVE-2006-0539
The convert-fcrontab program in fcron 3.0.0 might allow local users...
Medium 4.6
CVE-2004-1033
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors...
Low 2.1
CVE-2004-1032
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows...
Low 2.1

Affected Vendor

thibault godouet

View all reports →

Affected Software

fcron, linux
Vulnerable Versions:
2.0.1, 2.9.4

Timeline

Official Publish: November 24th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.