CVE-2001-0559

Опубликовано: 14 авг. 2001

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.

Ссылки

http://www.debian.org/security/2001/dsa-054
Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
http://www.securityfocus.com/archive/1/183029
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2687
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6508
http://www.debian.org/security/2001/dsa-054
Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
http://www.securityfocus.com/archive/1/183029
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2687
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6508

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*

Версия до 3.0.1 (включая)

EPSS

Процентиль: 41%

0.00186

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xxwc-wcp3-hfp4

github

около 3 лет назад

BDU:2015-02970

fstec

около 24 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации