{"id":"CVE-2009-3589","details":"incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.","modified":"2026-04-10T03:40:57.297400Z","published":"2009-10-08T15:30:00Z","references":[{"type":"FIX","url":"http://koji.fedoraproject.org/koji/buildinfo?buildID=134880"},{"type":"WEB","url":"https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5"}],"schema_version":"1.7.5"}