PT-2001-1025 · Isc · Vixie Cron

Publicado

2001-02-12

·

Atualizado

2017-10-10

·

CVE-2001-0560

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Vixie cron versions 3.0.1-56 and earlier
Description A buffer overflow issue exists, potentially allowing a local attacker to gain additional privileges by using a long username, specifically one that exceeds 20 characters. The exploitation of this issue may lead to a breach of confidentiality, integrity, and availability of protected information.
Recommendations For Vixie cron versions 3.0.1-56 and earlier, consider restricting username lengths to 20 characters or less as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-07838
CVE-2001-0560

Produtos afetados

Vixie Cron