CVE-2007-1856 Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed...
LowCVSS 2.1
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paul vixie vixie cron | <= 4.1 | No fix listed |
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- RHSA-2007:0345 vendor-advisory
- 24905 third-party-advisory
- 24995 third-party-advisory
- 25321 third-party-advisory
- 25723 third-party-advisory
- 26909 third-party-advisory
- 27706 third-party-advisory
- 27886 third-party-advisory
- GLSA-200704-11 vendor-advisory
- support.avaya.com
- MDKSA-2007:234 vendor-advisory
- SUSE-SR:2007:007 vendor-advisory
- 23520 vdb-entry
- 1018081 vdb-entry
- ADV-2007-3229 vdb-entry
- oval:org.mitre.oval:def:11463 signature vdb-entry
- Debian Security Tracker CVE-2007-1856 vendor-advisory