1887 matches found
CVE-2001-0560: Undefined Security Weakness
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username 20 characters...
CVE-2001-0559: Undefined Security Weakness
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...
CVE-2001-1576
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument...
CVE-2001-0560
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username 20 characters...
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 2 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Various shells create temporary files insecurely when using << operator
Overview sh uses /tmp files of a predictable name in creating files for input redirection using the operator. Description When performing the "" redirection, /bin/sh creates a temporary file in /tmp with a name based on the process id, writes subsequent input out to that file, and then closes the...
Security Update: [CSSA-2001-SCO.3] UnixWare - cron buffer overflow
To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - cron buffer overflow Advisory number: CSSA-2001-SCO.3 Issue date: 2001 June, 27 Cross reference: 1. Problem Description The cron command is vulnerable to a...
Дырка в vixie cron (privelege drop failure)
При определенных условиях при выполнении задач не сбрасываются привилегии root...
Vixie cron vulnerability
Thank you for using SecurityFocus.com's Security Intelligence Alert SIA Service. To manage account please visit https://alerts.securityfocus.com/ For questions or comments email us at [email protected]. --------------------------------------------------------------------------- Security...
[SECURITY] [DSA-054-1] cron local root exploit
Package : cron Problem type : local root exploit Debian-specific: no A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. A malicious user could easily gain root access. This has been fixed in version 3.0pl1-57.3 or 3.0pl1-67 for unstable...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 1 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
CVE-2000-0312
OpenBSD 2.5 cron is affected. A local user can exploit an argv[] that is not NULL terminated, which is passed to cron’s fake popen function, to gain root privileges.
CVE-2000-0312: Undefined Security Weakness
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
[SECURITY] [DSA 024-1] New version of cron released
---------------------------------------------------------------------------- Debian Security Advisory DSA-024-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27, 2001 - ---------------------------------------------------------------------------- Package : cron...
UUCP Exploit - file creation/overwriting (symlinks)
Exploit for linux platform in category local exploits =================================================== UUCP Exploit - file creation/overwriting symlinks =================================================== / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30...