CVE-2004-1033: Gentoo Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

Affected products

• Gentoo Linux: any version
• Thibault Godouet Fcron: version 2.0.1 only; version 2.9.4 only

Published 2005-03-01. Last modified 2026-06-16.