Vulnerability Details CVE-2012-6110
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.2%
CVSS Severity
CVSS v2 Score 2.1
References
- http://seclists.org/oss-sec/2013/q1/102
- http://untroubled.org/bcron/NEWS
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81383
- http://seclists.org/oss-sec/2013/q1/102
- http://untroubled.org/bcron/NEWS
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81383
Products affected by CVE-2012-6110
-
cpe:2.3:a:bcron_project:bcron_exec:*
-
cpe:2.3:a:bcron_project:bcron_exec:0.04
-
cpe:2.3:a:bcron_project:bcron_exec:0.05
-
cpe:2.3:a:bcron_project:bcron_exec:0.06
-
cpe:2.3:a:bcron_project:bcron_exec:0.07
-
cpe:2.3:a:bcron_project:bcron_exec:0.08