← Back

CVE-2005-1038

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.

Affected (4)

1 product
Vixie Cron
1 product
Enterprise Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 4.1
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Version 4.0
Version 4.0
Version 4.0

References (22)

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Patch
ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.