Back to Database
Status published
Low
CVE-2010-0424
The edit_cmd function in crontab.c in (1) cronie before 1.4.4...
Vulnerability Description
The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0424
Credits & Attribution
No credits recorded in the NVD database.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=565809
- http://secunia.com/advisories/38700
- http://git.fedorahosted.org/git/cronie.git?p=cronie.git%3Ba=commit%3Bh=9e4a8fa5f9171fb724981f53879c9b20264aeb61
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035762.html
- http://secunia.com/advisories/38741
- http://secunia.com/advisories/48104
- http://www.securityfocus.com/bid/38391
More from fedorahosted
View All →CVE-2012-6097
File descriptor leak in cronie 1.4.8, when running in certain...
Medium
4.3
CVE-2010-4341
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in...
Low
2.1
CVE-2009-2905
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and...
Medium
4.6
CVE-2009-2410
The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not...
High
7.5
Affected Vendor
fedorahosted
View all reports →Affected Software
cronie, vixie cron
Vulnerable Versions:
0
Timeline
Official Publish:
February 25th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.