What’s Vulnerable › Vulnerabilities

CVE-2012-6110

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-09-29 · updated 2026-06-16
• Weakness: CWE-264

Description

bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.

Affected products

• Bcron Project Bcron Exec: through 0.09; 0.04, 0.05, 0.06, 0.07, 0.08

References

• http://seclists.org/oss-sec/2013/q1/102
• http://untroubled.org/bcron/NEWS
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81383
• http://seclists.org/oss-sec/2013/q1/102
• http://untroubled.org/bcron/NEWS
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81383

Get alerted when CVE-2012-6110 or the next vulnerability affects your stack