CVE-2010-0424

2010-02-2519:30:00

CWE-59

redhat

web.nvd.nist.gov

cve-2010-0424

crontab.c

cronie

vixie cron

symlink attack

denial of service

nvd

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.

Affected configurations

Nvd

Node

fedorahostedcronieRange≤1.4.3

paul_vixievixie_cron

VendorProductVersionCPE
fedorahostedcronie*cpe:2.3:a:fedorahosted:cronie:*:*:*:*:*:*:*:*
paul_vixievixie_cron*cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*