exploits , vulnerabilities , articles , Vixie Cron /var/spool/cron Temporary Crontab File Vulnerability

Title	Vixie Cron /var/spool/cron Temporary Crontab File Vulnerability
Published	2000-11-17-12:00AM
Updated	2000-11-17-12:00AM
Class	Race Condition Error
CVE	CVE-2000-1096
Remote	No
Local	Yes
Credit	This vulnerability was first announced on the BugTraq mailing list by Michal Zalewski <lcamtuf@tpi.pl> on November 17, 2000.
Vulnerable	Paul Vixie Vixie Cron 3.0 pl1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc Progeny Debian 1.0
Not Vulnerable
Code	This exploit was written by Michal Zalewski <lcamtuf@tpi.pl> and posted to Bugtraq on November 17, 2000: /data/vulnerabilities/exploits/xpl.sh
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
• 2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
• 2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 10:08:01 +0000