vixie-cron: crontab allows any user to read another users crontabs
Package(s): | vixie-cron | CVE #(s): | CAN-2005-1038 | ||||||||||||
Created: | April 15, 2005 | Updated: | March 15, 2006 | ||||||||||||
Description: | crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235. See also this Security Focus report. | ||||||||||||||
Alerts: |
|