VULNERABILITY INTELLIGENCE
CVE-2009-3589
CVSS score4.6 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2009-10-08
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.