CVEvulnerability
CVE-2001-0559
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-08-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Affected configurations
• paul vixie vixie cron (<= 3.0.1)
Related
Referenced by CWE · observed example (1)
- CWE-271 Privilege Dropping / Lowering Errors weakness
References
- http://www.debian.org/security/2001/dsa-054 Vendor Advisory
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3 Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html www.novell.com
- http://www.securityfocus.com/archive/1/183029 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2687 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6508 exchange.xforce.ibmcloud.com
- http://www.debian.org/security/2001/dsa-054 Vendor Advisory
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3 Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html www.novell.com
- http://www.securityfocus.com/archive/1/183029 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2687 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6508 exchange.xforce.ibmcloud.com