|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200606-07] Vixie Cron: Privilege Escalation Vulnerability Assessment Details
|
[GLSA-200606-07] Vixie Cron: Privilege Escalation |
||
Vixie Cron: Privilege Escalation Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200606-07 (Vixie Cron: Privilege Escalation) Roman Veretelnikov discovered that Vixie Cron fails to properly check whether it can drop rights accordingly if setuid() in do_command.c fails due to a user exceeding assigned resource limits. Impact Local users can execute code with root rights by deliberately exceeding their assigned resource limits and then starting a command through Vixie Cron. This requires resource limits to be in place on the machine. Workaround There is no known workaround at this time. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2607 Solution: All Vixie Cron users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-process/vixie-cron-4.1-r9" Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: (C) 2006 Michel Arboi |
||
Cables, Connectors |
Vintage Apple Macintosh SE Case - Empty Shell - Housing retro project
$60.00
Vintage Microsoft Office 2000 Premium 4 CDs + Product Keys + Service Pack CD
$59.99
Vintage NEC MultiSpin CDR-38 External SCSI CD-ROM Reader Power Supply and SCSI
$40.00
VINTAGE COMMODORE 64 COMPUTER W/BOX, DUST COVER, POWER SUPPLY, MANUAL c. 1982
$225.00
Vintage Intel UPI-41 Universal Peripheral Interface User's Manual
$24.99
Vintage 1980s IBM PC Jr Model 4860 Desktop Tower Computer W/2 EXPANSIONS
$100.00
Computer Lab International 122 Key Vintage Keyboard PS/2 TESTED
$88.88
Vintage -The Applesoft Tutorial Apple II Basic Programming Manual--Paperback
$19.99
Vintage 1989 Macintosh Adobe Type Manager User Guide
$30.00
Vintage IBM Model F Mechanical Keyboard - Untested
$79.95
|
||
No Discussions have been posted on this vulnerability. |