Inotify incron 0.5.5 access control

Summaryinfo

A vulnerability has been found in Inotify incron 0.5.5 and classified as problematic. The affected element is an unknown function. The manipulation leads to access control. This vulnerability is referenced as CVE-2009-3589. No exploit is available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Inotify incron 0.5.5. This issue affects an unknown part. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

incron 0.5.5 does not initialize supplementary groups when running a process from a user s incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

The weakness was published 10/08/2009 (Website). It is possible to read the advisory at koji.fedoraproject.org. The identification of this vulnerability is CVE-2009-3589 since 10/08/2009. The exploitation is known to be easy. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Inotify

Name

• incron

Version

• 0.5.5

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion