Vixie Cron: Denial of service

🗓️ 16 Apr 2007 00:00:00Reported by Gentoo FoundationType

Vixie Cron has weak permissions on Gentoo allowing a local user to create hard links to system and users cron files triggering st_link safety check

Reporter	Title	Published	Views	Family All 35
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Gentoo Linux operating system, which allows a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 3 / 4 / 5 : vixie-cron (CESA-2007:0345)	20 May 200700:00	–	nessus
Tenable Nessus	GLSA-200704-11 : Vixie Cron: Denial of Service	19 Apr 200700:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : vixie-cron (MDKSA-2007:234)	4 Dec 200700:00	–	nessus
Tenable Nessus	Oracle Linux 5 : Moderate: / vixie-cron (ELSA-2007-0345)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 3 / 4 / 5 : vixie-cron (RHSA-2007:0345)	20 May 200700:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : vixie-cron on SL5.x, SL4.x, SL3.x i386/x86_64	1 Aug 201200:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : cron (cron-3092)	17 Oct 200700:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : cron (ZYPP Patch Number 3093)	13 Dec 200700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Gentoo	any	all	sys-process/vixie-cron	4.1-r10	UNKNOWN

16 Apr 2007 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 22.1

EPSS0.00383