Back to Database
Status published
High
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly...
Vulnerability Description
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0559
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3
- http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
- http://www.securityfocus.com/archive/1/183029
- http://www.debian.org/security/2001/dsa-054
- http://www.securityfocus.com/bid/2687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6508
More from paul vixie
View All →CVE-2007-1856
Vixie Cron before 4.1-r10 on Gentoo Linux is installed with...
Low
2.1
CVE-2006-2607
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the...
High
7.2
CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e...
Low
2.1
CVE-2001-0560
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow...
Medium
4.6
CVE-2000-1096
crontab by Paul Vixie uses predictable file names for a...
Low
3.7
Affected Vendor
paul vixie
View all reports →Affected Software
vixie cron
Vulnerable Versions:
0
Timeline
Official Publish:
March 9th, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.