The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
References
Configurations
Configuration 1 (hide)
|
History
13 Feb 2023, 04:16
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2010-02-25 19:30
Updated : 2023-12-10 11:03
NVD link : CVE-2010-0424
Mitre link : CVE-2010-0424
CVE.ORG link : CVE-2010-0424
JSON object : View
Products Affected
paul_vixie
- vixie_cron
fedorahosted
- cronie
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')