244 matches found
CVE-2006-2607
docommand.c in Vixie cron vixie-cron 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in...
CVE-2006-2607: Undefined Security Weakness
docommand.c in Vixie cron vixie-cron 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in...
RHEL 3 : vixie-cron (RHSA-2006:0117)
An updated vixie-cron package that fixes a bug and security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified program...
vixie security update
CentOS Errata and Security Advisory CESA-2006:0117 An updated vixie-cron package that fixes a bug and security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is...
Low: Red Hat Security Advisory: vixie-cron security update
An updated vixie-cron package that fixes a bug and security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified program...
RHEL 4 : vixie-cron (RHSA-2005:361)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:361 advisory. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. A bug was...
vixie security update
CentOS Errata and Security Advisory CESA-2005:361 An updated vixie-cron package that fixes various bugs and a security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron...
Low: Red Hat Security Advisory: vixie-cron security update
An updated vixie-cron package that fixes various bugs and a security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specifie...
security flaw
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
Fedora Core 3 : vixie-cron-4.1-33_FC3 (2005-320)
o Fixes security vulnerability CVE-2005-1038 http://www.securityfocus.com/archive/1/395093 o Makes filename and command line length constraints correspond to system limits o Improved PAM support Note that Tenable Network Security has extracted the preceding description block directly from the...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2005-1038
CVE-2005-1038 affects Vixie cron 4.1 where running cron with -e can be exploited by a local attacker to read other users’ crontab files via a symlink. Connected advisories (RHSA-2005:361, RHSA-2006:0117, SUSE/SUSE‑CRON plugins) indicate fixes in vixie-cron are available and released as security u...
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2005-1038: Undefined Security Weakness
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
vixie-cron symbolic links information leak
During editing synbolic links are not checked, allowing to read tasf files of different users...
crontab from vixie-cron allows read other users crontabs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: vixie-cron Author: Karol Wisek [email protected] Date: Mar 21, 2005 Issue: crontab allows any user to read another users crontabs Description: Crontab is used to create special files used by cron to execute commands at specified dates an...
Mandrake Linux Security Advisory : vixie-cron (MDKSA-2001:050)
A recent security fix to cron introduced a new problem with giving up privileges before invoking the editor. A malicious local user could exploit this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
CVE-2001-0559
The CVE-2001-0559 issue affects Vixie cron up to 3.0.1. crontab fails to drop privileges correctly after a failed parsing of a modification operation, potentially enabling a local attacker to gain additional privileges when an editor is invoked to fix the error. Publicly documented references (De...