Re: Vixie cron vulnerability

From: Edwin Chiu (Edwin.Chiu@E-WARES.COM)
Date: Tue May 08 2001 - 10:44:39 PDT

Next message: Jay D. Dyson: "Re: Vixie cron vulnerability"

Previous message: Amaury Jacquot: "Re: Advisory for Spynet Chat"
In reply to: Cade Cairns: "Vixie cron vulnerability"
Next in thread: Jay D. Dyson: "Re: Vixie cron vulnerability"
Reply: Jay D. Dyson: "Re: Vixie cron vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

FYI

The exploit failed for:

Redhat 6.1
    vixie-cron-3.0.1-39

Redhat 6.2
    vixie-cron-3.0.1-40


Regards,
Edwin

Cade Cairns wrote:

> Greetings Bugtraqers,
>
> Attached is a simple proof of concept for the vixie cron vulnerability
> recently published in Debian Security Advisory DSA-054-1. The code was
> written during SIA analysis of this vulnerability.
>
> Further information on the vulnerability may be found in the SecurityFocus
> SIA commercial alert, also attached to this message.
>
> Cade Cairns
> SecurityFocus
> http://www.securityfocus.com/

Next message: Jay D. Dyson: "Re: Vixie cron vulnerability"
Previous message: Amaury Jacquot: "Re: Advisory for Spynet Chat"
In reply to: Cade Cairns: "Vixie cron vulnerability"
Next in thread: Jay D. Dyson: "Re: Vixie cron vulnerability"
Reply: Jay D. Dyson: "Re: Vixie cron vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 08 2001 - 13:45:45 PDT