Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2006-2607
HistoryMay 25, 2006 - 8:02 p.m.

Deserialization of untrusted data

2006-05-2520:02:00
PRIOn knowledge base
www.prio-n.com
1

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

47.7%

JSON

do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.

CPENameOperatorVersion
vixie_croneq4.1

Related

nessus 6
gentoo 1
centos 1
suse 1
ubuntucve 1
cve 1
debiancve 1
openvas 4
myhack58 1
redhat 1
ubuntu 1
nessus
nessus
GLSA-200606-07 : Vixie Cron: Privilege Escalation
2006-06-11 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : cron vulnerability (USN-778-1)
2009-06-02 00:00:00
openSUSE 10 Security Update : cron (cron-1440)
2007-10-17 00:00:00
gentoo
gentoo
Vixie Cron: Privilege Escalation
2006-06-09 00:00:00
centos
centos
vixie security update
2006-07-12 18:56:16
suse
suse
local privilege escalation in cron
2006-05-31 13:32:34
ubuntucve
ubuntucve
CVE-2006-2607
2006-05-25 00:00:00
cve
cve
CVE-2006-2607
2006-05-25 20:02:00
debiancve
debiancve
CVE-2006-2607
2006-05-25 20:02:00
openvas
openvas
Ubuntu: Security Advisory (USN-778-1)
2009-06-05 00:00:00
Gentoo Security Advisory GLSA 200606-07 (vixie-cron)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-07 (vixie-cron)
2008-09-24 00:00:00
myhack58
myhack58
Setuid() - nproc limit the type of vulnerability of in-depth analysis-vulnerability warning-the black bar safety net
2006-08-04 00:00:00
redhat
redhat
(RHSA-2006:0539) vixie-cron security update
2006-07-12 00:00:00
ubuntu
ubuntu
cron vulnerability
2009-06-01 00:00:00

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

47.7%

JSON
Related for PRION:CVE-2006-2607
nessus6gentoo1centos1suse1ubuntucve1cve1debiancve1openvas4myhack581redhat1ubuntu1