CVE-2000-1096 - CVE House
Back to Database
Status published Low CVE-2000-1096

crontab by Paul Vixie uses predictable file names for a...

Vulnerability Description

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2000-1096

Credits & Attribution

No credits recorded in the NVD database.

References

More from paul vixie

View All →
CVE-2007-1856
Vixie Cron before 4.1-r10 on Gentoo Linux is installed with...
Low 2.1
CVE-2006-2607
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the...
High 7.2
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e...
Low 2.1
CVE-2001-0560
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow...
Medium 4.6
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly...
High 7.2

Affected Vendor

Affected Software

vixie cron
Vulnerable Versions:
3.0_pl1

Timeline

Official Publish: January 22nd, 2001
Last Modified: August 8th, 2024
Added to House: July 17th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.