CVE-2012-6110
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files...
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
Exploit likelihood
What each source reports
NVD Score used
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
CVE-2012-6110- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
CVE-2012-6110- Updated
- 2026-11-02
EUVDEUVD-2012-5978 No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
EUVD-2012-5978- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9p5-9mcj-v7gh No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files...
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
GHSA-j9p5-9mcj-v7gh- Updated
- 2026-11-02
OSV No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
CVE-2012-6110- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-6110 No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
DEBIAN-CVE-2012-6110- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-6110 No score
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.
- Record
UBUNTU-CVE-2012-6110- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6110 is a low vulnerability (CVSS 2.1) in Bcron Project Exec, published September 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in bcron 0.09-13.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650
exchange.xforce.ibmcloud.com/vulnerabilities/81383
seclists.org/oss-sec/2013/q1/102
untroubled.org/bcron/NEWS
nvd.nist.gov/vuln/detail/CVE-2012-6110
github.com/advisories/GHSA-j9p5-9mcj-v7gh
security-tracker.debian.org/tracker/CVE-2012-6110
ubuntu.com/security/CVE-2012-6110
cve.org/CVERecord?id=CVE-2012-6110