Nessus Plugin #14891

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA054] DSA-054-1 cron

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-054-1 cron

Version:

$Revision: 1.4 $

Cve_id:

CVE-2001-0559

Bugtraq_id:

-

Xrefs:

DSA:054

Description:

A recent (fall 2000) security fix to cron introduced an error in giving
up privileges before invoking the editor. This was discovered by Sebastian
Krahmer from SuSE. A malicious user could easily gain root access.

This has been fixed in version 3.0pl1-57.3 (or 3.0pl1-67 for unstable).
No exploits are known to exist, but we recommend that you upgrade your
cron packages immediately.



Solution : http://www.debian.org/security/2001/dsa-054
Risk factor : High