CVE-2001-0559

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2001/dsa-054Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
http://www.securityfocus.com/archive/1/183029Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2687Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6508
http://www.debian.org/security/2001/dsa-054Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
http://www.securityfocus.com/archive/1/183029Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2687Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6508

Timeline

Published: Aug 14, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-05604.6Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 char CVE-2001-05617.5Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot do CVE-2001-05627.5a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which inc CVE-2001-05635.0ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 chara CVE-2001-05645.0APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of CVE-2001-05654.6Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.CVE-2001-05665.0Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNM CVE-2001-05674.6Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mapping CVE-2001-05682.1Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasse CVE-2001-05692.1Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) Pro CVE-2001-05707.2minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.CVE-2001-05715.0Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 al