CVE-2009-3589

Source
https://cve.org/CVERecord?id=CVE-2009-3589
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-3589.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2009-3589
Downstream
Published
2009-10-08T15:30:00Z
Modified
2026-04-10T03:40:57.297400Z
Summary
[none]
Details

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

References

Affected packages