244 matches found
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...
CVE-2001-0560
CVE-2001-0560 describes a local privilege escalation in Vixie cron (3.0.1-56 and earlier) caused by a buffer overflow triggered by a username longer than 20 characters. Affected component: crontab handling in Vixie cron. Impact per sources: partial confidentiality/integrity/availability, local at...
CVE-2001-0560: Undefined Security Weakness
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username 20 characters...
CVE-2001-0559: Undefined Security Weakness
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...
CVE-2001-0560
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username 20 characters...
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 2 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Дырка в vixie cron (privelege drop failure)
При определенных условиях при выполнении задач не сбрасываются привилегии root...
Vixie cron vulnerability
Thank you for using SecurityFocus.com's Security Intelligence Alert SIA Service. To manage account please visit https://alerts.securityfocus.com/ For questions or comments email us at [email protected]. --------------------------------------------------------------------------- Security...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 1 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
CVE-2000-1096
crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating...
vixie-cron - Local Privilege Escalation
!/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo "--------------------------------- presents...
vixie-cron - Local Privilege Escalation
vixie-cron - Local Privilege Escalation !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo...
vixie-cron Local Root Exploit
Exploit for linux platform in category local exploits ============================= vixie-cron Local Root Exploit ============================= !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |'...
[SECURITY] New Debian cron packages released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 17, 2000 - ---------------------------------------------------------------------------- Package: cron Vulnerability:...
vixie cron...
Attached shell-script exploits fopen + preserved umask vulnerability in Paul Vixie's cron code. It will work on systems where /var/spool/cron is user-readable eg. 0755 - AFAIR Debian does so. RedHat at least 6.1 and previous have mode 0700 on /var/spool/cron, and thus it isn't exploitable in its...
Дырка в vixie cron
При созданиие задания задание помещается во временный файл со случайным именем задаваемым достаточно коротким числом. При этом не проверяется существование файла и разрешения на файл. Что позволяет "подменить" чужое задание, создав большое число временных файлов...