Description
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3 ↗
- http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html ↗
- http://www.securityfocus.com/archive/1/183029 ↗
- http://www.debian.org/security/2001/dsa-054 ↗
- http://www.securityfocus.com/bid/2687 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6508 ↗