Description
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters).
References
- IY17261 vendor-advisory
- 5583 vdb-entry
- MDKSA-2001:022 vendor-advisory
- 20010220 Immunix OS Security update for vixie-cron mailing-list
- RHSA-2001:014 vendor-advisory
- vixie-crontab-bo(6098) vdb-entry
- 20010210 vixie cron possible local root compromise mailing-list
- IY17048 vendor-advisory