1629 matches found
Fedora Core 3 : vixie-cron-4.1-33_FC3 (2005-320)
o Fixes security vulnerability CVE-2005-1038 http://www.securityfocus.com/archive/1/395093 o Makes filename and command line length constraints correspond to system limits o Improved PAM support Note that Tenable Network Security has extracted the preceding description block directly from the...
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
!/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated as /VCNative-.log, which is easily...
CVE-2001-1576
CVE-2001-1576: Buffer overflow in cron on Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. The connected documents confirm cron as the affected component and the root cause is a buffer overflow; no explicit exploit details or fixes are provided in the s...
CVE-2001-1576
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2005-1038
CVE-2005-1038 affects Vixie cron 4.1 where running cron with -e can be exploited by a local attacker to read other users’ crontab files via a symlink. Connected advisories (RHSA-2005:361, RHSA-2006:0117, SUSE/SUSE‑CRON plugins) indicate fixes in vixie-cron are available and released as security u...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
vixie-cron symbolic links information leak
During editing synbolic links are not checked, allowing to read tasf files of different users...
crontab from vixie-cron allows read other users crontabs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: vixie-cron Author: Karol Wisek [email protected] Date: Mar 21, 2005 Issue: crontab allows any user to read another users crontabs Description: Crontab is used to create special files used by cron to execute commands at specified dates an...
Debian DSA-024-1 : cron - local insecure crontab handling
The FreeBSD team has found a bug in the way new crontabs were handled which allowed malicious users to display arbitrary crontab files on the local system. This only affects valid crontab files so it can't be used to get access to /etc/shadow or something. crontab files are not especially secure...
Debian DSA-054-1 : cron - local root exploit
A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. This was discovered by Sebastian Krahmer from SuSE. A malicious user could easily gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
RsyncX vulnerabilities
Product: RsyncX is a frontend for rsync running on OS X, with additional features such as crontab editing. http://www.macosxlabs.org/rsyncx/rsyncx.html Problems: 1 RsyncX is installed setuid root and setgid wheel. Upon execution, the program drops root privileges only via seteuidgetuid . However ...
MacOSXLabs RsyncX 2.1 - Insecure Temporary File Creation
MacOSXLabs RsyncX 2.1 - Insecure Temporary File Creation source: https://www.securityfocus.com/bid/11212/info RsyncX is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A loc...
Mandrake Linux Security Advisory : vixie-cron (MDKSA-2001:050)
A recent security fix to cron introduced a new problem with giving up privileges before invoking the editor. A malicious local user could exploit this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
Solaris 7 (sparc) : 107451-08
SunOS 5.7: /usr/sbin/cron Patch. Date this patch was last updated by Sun : Jan/14/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
CVE-2002-0542
Technical details about CVE-2002-0542 are not publicly provided in the supplied documents. Monitor for updates from CVE lists and vendor advisories.
CVE-2002-0542
mail in OpenBSD 2.9 and 3.0 processes a tilde escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron...
@stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: TruBlueEnvironment Privilege Escalation Attack Release Date: 02/14/2003 Application: TruBlueEnvironment Platform: MacOS X 10.2.3 and below Severity: Local users can gain root privileges...