CVE:CVE-2012-6110
CNNVD:CNNVD-201301-394
bcron是一款类似cron的调度程序。
bcron 0.10之前版本的bcron-exec中存在安全漏洞，该漏洞源于程序运行cron任务时没有关闭与临时文件相关的文件描述符。本地攻击者可通过访问打开的文件描述符利用该漏洞修改任务文件，发送垃圾信息。
solution:Upgrade bcron_project bcron_exec to a higher version than 0.09,0.04,0.05,0.06,0.07,0.08,and avoid the version (,0.09],0.04,0.05,0.06,0.07,0.08