Lucene search

K

5 matches found

CVE
CVE
added 2010/02/25 7:30 p.m.100 views

CVE-2010-0424

The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.

3.3CVSS7.2AI score0.00044EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.42 views

CVE-2001-0559

crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.

7.2CVSS6.5AI score0.00186EPSS
CVE
CVE
added 2007/04/18 3:19 a.m.40 views

CVE-2007-1856

Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.

2.1CVSS5.8AI score0.00051EPSS
CVE
CVE
added 2024/08/20 6:15 a.m.40 views

CVE-2024-43688

cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was introduced during a May 2023 refactoring.

7.3CVSS6.8AI score0.00087EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.34 views

CVE-2001-0560

Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters).

4.6CVSS6.8AI score0.00216EPSS