CVE-2009-3589

MEDIUM · CVSS 4.6 EPSS 0.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-10-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-3589

Severity

MEDIUM

CVSS

4.6

EPSS

0.30%

Original NVD Description

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.