CVE-2004-1033
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-1033
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fcron 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fcron是一款命令执行调度程序，可代替Vixie Cron使用。 Fcron包含的fcrontab程序存在设计问题，本地攻击者可以利用这个漏洞查看fcron.allow和fcron.deny文件内容。 问题是由于Fcron泄露/etc/fcron.allow和/etc/fcron.deny打开的文件描述符给调用的编辑器。这些文件的默认权限不允许非特权用户读取： rw-r----- 1 root fcron 253 Jul 29 12:45 /etc/fcron.allow -rw-r----- 1 ro
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-1033
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-1033
请登录查看更多情报信息。
- http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=falsethird-party-advisoryx_refsource_IDEFENSE
- https://nvd.nist.gov/vuln/detail/CVE-2004-1033
Same Patch Batch · n/a · 2004-11-24 · 11 CVEs total
| CVE-2004-0810 | Netopia Timbuktu远程缓冲区溢出漏洞 | |
| CVE-2004-0947 | ARJ软件UNARJ远程缓冲区溢出漏洞 | |
| CVE-2004-0950 | Danware NetOp Host多个信息泄露漏洞 | |
| CVE-2004-1021 | Apple iCal日历导入闹铃提醒故障漏洞 | |
| CVE-2004-1029 | Sun Java Plugin任意包访问漏洞 | |
| CVE-2004-1030 | Fcron 文件内容泄露漏洞 | |
| CVE-2004-1031 | Fcron 配置绕过漏洞 | |
| CVE-2004-1032 | Fcron文件删除和空文件建立漏洞 | |
| CVE-2004-1053 | FreeBSD fetch 整数溢出漏洞 | |
| CVE-2004-1055 | PHPMyAdmin 多个跨站脚本攻击(XSS)漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2004-1033
No comments yet