CVE-2001-0559

概要

参考情報

• debian.org/security/2001/dsa-054 · Vendor Advisory
• linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3 · Patch
• novell.com/linux/security/advisories/2001_017_cron_txt.html
• securityfocus.com/archive/1/183029 · Exploit
• securityfocus.com/bid/2687 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/6508

vixie cron のその他の脆弱性

• CVE-2007-1856低 2.1Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cro…
• CVE-2006-2607高 7.2do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root priv…
• CVE-2005-1038低 2.1crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file be…
• CVE-2001-0560中 4.6Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 char…
• CVE-2000-1096低 3.7crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user execu…