CVE-2009-3589

CVE-2009-3589 describes a privilege escalation vulnerability in incron 0.5.5, affecting the inotify incron product. The flaw stems from incron failing to properly initialize supplementary groups when executing processes from user incrontabs, leading to processes running with the incrond supplementary groups. This allows local users to gain privileges through a specially crafted incrontab table. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability has a low attack complexity and requires local access, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.