CVE-2007-1856

概要

参考情報

• lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
• rhn.redhat.com/errata/RHSA-2007-0345.html
• secunia.com/advisories/24905
• secunia.com/advisories/24995
• secunia.com/advisories/25321
• secunia.com/advisories/25723
• secunia.com/advisories/26909
• secunia.com/advisories/27706
• secunia.com/advisories/27886
• security.gentoo.org/glsa/glsa-200704-11.xml
• support.avaya.com/elmodocs2/security/ASA-2007-261.htm
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2007_007_suse.html
• securityfocus.com/bid/23520
• securitytracker.com/id
• vupen.com/english/advisories/2007/3229

vixie cron のその他の脆弱性

• CVE-2006-2607高 7.2do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root priv…
• CVE-2005-1038低 2.1crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file be…
• CVE-2001-0560中 4.6Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 char…
• CVE-2001-0559高 7.2crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could …
• CVE-2000-1096低 3.7crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user execu…