PT-2001-1025 · Isc · Vixie Cron

Published 2001-02-12 · Updated 2017-10-10 · CVE-2001-0560

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vixie cron versions 3.0.1-56 and earlier

Description A buffer overflow issue exists, potentially allowing a local attacker to gain additional privileges by using a long username, specifically one that exceeds 20 characters. The exploitation of this issue may lead to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For Vixie cron versions 3.0.1-56 and earlier, consider restricting username lengths to 20 characters or less as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-07838

CVE-2001-0560

Affected Products

Vixie Cron

References · 11

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0197.html · Exploit
• 🔥 http://redhat.com/support/errata/RHSA-2001-014.html · Exploit
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY17261&apar=only · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0560 · Security Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY17048&apar=only · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07838 · Security Note
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-022.php3 · Vendor Advisory
• http://archives.neohapsis.com/archives/linux/immunix/2001-q1/0066.html · Vendor Advisory
• http://osvdb.org/5583 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6098 · Note
• https://rhn.redhat.com/errata/RHSA-2001-014.html · Note