CVE-2004-1033: Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local u...

Security readout for executives and security teams

CVE-2004-1033 is a local information disclosure issue in Fcron. A user already on the system may be able to read fcron.allow and fcron.deny, which are meant to control who can use fcron. The business risk is limited unless vulnerable Fcron exists on shared or multi-user Unix/Linux hosts. Exposure is most likely on legacy Unix/Linux systems running Fcron 2.0.1, 2.9.4, or possibly earlier versions, especially shared hosts where untrusted local users have shell access. Treat this as a low-priority legacy hygiene issue unless vulnerable Fcron exists on shared hosts. It is not remote code execution, but it weakens local access-control boundaries and should be removed from exposed multi-user environments. Mitigation focus: Inventory systems for installed Fcron packages and versions.; Prioritize shared systems with local user access.; Check Gentoo, distribution, or vendor advisories for fixed Fcron packages..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.