{"cve":"CVE-2004-1031","nvd":{"published":"2005-03-01T05:00:00.000","modified":"2026-06-16T22:06:53.350","status":"Modified","description":"fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://security.gentoo.org/glsa/glsa-200411-27.xml","http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false","http://www.securityfocus.com/bid/11684","https://exchange.xforce.ibmcloud.com/vulnerabilities/18076","http://security.gentoo.org/glsa/glsa-200411-27.xml"],"products":["gentoo:linux","thibault_godouet:fcron"],"source":"nvd","synced_at":"2026-10-19T19:38:22.000386253+00:00"},"epss":{"cve":"CVE-2004-1031","score":0.00369,"percentile":0.30817,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}