NVD

Id
11980  
Name
CVE-2010-0424  
Description
The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-02-25  
Modified Date
2010-03-02  
Seq
2010-0424  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66041 11980 CVE-2010-0424 http://git.fedorahosted.org/git/cronie.git?p=cronie.git;a=commit;h=9e4a8fa5f9171fb724981f53879c9b20264aeb61  View
66042 11980 CVE-2010-0424 FEDORA-2010-2751  View
66043 11980 CVE-2010-0424 38391  View
66044 11980 CVE-2010-0424 https://bugzilla.redhat.com/show_bug.cgi?id=565809  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38024 JVNDB-2010-003809 cronie および Vixie cron の edit_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性 (1) cronie および (2) Vixie cron (vixie-cron) の crontab.c の edit_cmd 関数には、任意のファイルの編集時間を変更し、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0424 43004 CVE-2010-0424 11980 3.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003809.html 2010-02-25 2012-06-26 View