Red Hat Security AdvisoryRHSA-2007:0345
vixie-cron security update
Released 2007-05-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 vixie-cron-4.1-19.EL3, vixie-cron-4.1-19.EL3.i386
- Red Hat Enterprise Linux (v. 5 server) vixie-cron-4:4.1-70.el5, vixie-cron-4:4.1-70.el5.i386, vixie-cron-4:4.1-70.el5.ia64 +1
- Red Hat Enterprise Linux AS version 3 vixie-cron-4.1-19.EL3, vixie-cron-4.1-19.EL3.i386, vixie-cron-4.1-19.EL3.ia64 +1
- Red Hat Enterprise Linux AS version 4 vixie-cron-4:4.1-47.EL4, vixie-cron-4:4.1-47.EL4.i386, vixie-cron-4:4.1-47.EL4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) vixie-cron-4:4.1-70.el5, vixie-cron-4:4.1-70.el5.i386
- Red Hat Enterprise Linux Desktop version 4 vixie-cron-4:4.1-47.EL4, vixie-cron-4:4.1-47.EL4.i386
- Red Hat Enterprise Linux ES version 3 vixie-cron-4.1-19.EL3, vixie-cron-4.1-19.EL3.i386, vixie-cron-4.1-19.EL3.ia64
- Red Hat Enterprise Linux ES version 4 vixie-cron-4:4.1-47.EL4, vixie-cron-4:4.1-47.EL4.i386, vixie-cron-4:4.1-47.EL4.ia64
- Red Hat Enterprise Linux WS version 3 vixie-cron-4.1-19.EL3, vixie-cron-4.1-19.EL3.i386, vixie-cron-4.1-19.EL3.ia64
- Red Hat Enterprise Linux WS version 4 vixie-cron-4:4.1-47.EL4, vixie-cron-4:4.1-47.EL4.i386, vixie-cron-4:4.1-47.EL4.ia64
Fixes 1 record
Priority LOW 11
Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in d…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00383 · Published 2007-04-18 · Fixed
