Approved changes feed: RSS · Atom

cpe:2.3:a:inotify:incron:0.5.5:*:*:*:*:*:*:*

part: a version: 0.5.5 update: *

VendorInotify (10d44337-79ab-5aeb-8b6c-9462005d781d)
ProductIncron (34f74790-8f9a-52db-bdd1-e92fec577e23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/incron purl2cpe 2026-06-01 10:11:53.148472
pkg:deb/ubuntu/incron purl2cpe 2026-06-01 10:11:53.148473
pkg:github/danfruehauf/incron purl2cpe 2026-06-01 10:11:53.148475
pkg:rpm/fedora/incron purl2cpe 2026-06-01 10:11:53.148476
pkg:rpm/opensuse/incron purl2cpe 2026-06-01 10:11:53.148477
pkg:sourceforge/incron purl2cpe 2026-06-01 10:11:53.148479

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3589 vulnerable 2026-06-08 04:51:42.806056 Details available
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.
Published: 2009-10-08T15:00:00.000Z
Updated: 2024-09-16T17:27:41.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.