RedHat Linux 4.2/5.2/6.0 / S.u.S.E Linux 6.0/6.1 - Cron Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/602/info The version of Vixie cron that ships with RedHat versions 4.2, 5.2 and 6.0 is vulnerable to a local buffer overflow attack. By utilizing the MAILTO environment variable, a buffer can be overflown in the cronpopen function, allowing an attacker...

CVE-1999-0297

Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable...

PT-1996-1039 · Isc · Vixie Cron Library

Name of the Vulnerable Software and Affected Versions: Vixie Cron library versions up to 3.0 Description: The issue is related to a buffer overflow in the Vixie Cron library, which allows local users to gain root access by exploiting a long environmental variable. Recommendations: For Vixie Cron...