Red Hat Security AdvisoryRHSA-2006:0539
vixie-cron security update
Released 2006-07-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 vixie-cron-4:4.1-44.EL4, vixie-cron-4:4.1-44.EL4.i386, vixie-cron-4:4.1-44.EL4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 vixie-cron-4:4.1-44.EL4, vixie-cron-4:4.1-44.EL4.i386
- Red Hat Enterprise Linux ES version 4 vixie-cron-4:4.1-44.EL4, vixie-cron-4:4.1-44.EL4.i386, vixie-cron-4:4.1-44.EL4.ia64
- Red Hat Enterprise Linux WS version 4 vixie-cron-4:4.1-44.EL4, vixie-cron-4:4.1-44.EL4.i386, vixie-cron-4:4.1-44.EL4.ia64
Fixes 1 record
Priority LOW 32
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as orig…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00565 · Published 2006-05-25 · Fixed
