search for: vixi

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Buffer overflow in cron daemon Advisory ID: RHSA-1999:030-01 Issue date: 1999-08-25 Updated on: Keywords: vixie-cron crond MAILTO Cross references: --------------------------------------------------------------------- 1. Topic: A buffer overflow exists in crond, the cron daemon. This could allow local users to gain privilege. 2. Bug IDs fixed (http://developer.redhat.com/bugzilla/): 4706 3. Relevant re...

[Mod: Sent to linux-security instead of linux alert -- alex] Dave G. <daveg@ESCAPE.COM> wrote: > /* vixie crontab buffer overflow for RedHat Linux > * > * I dont think too many people know that redhat uses vixie crontab. > * I didn''t find this, just exploited it. The vulnerability involves an unguarded sscanf call in env.c. Enlarging the buffer to the largest possible input but...

CentOS Errata and Security Advisory CESA-2007:0345 vixie-cron security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vixie-cron-4.1-19.EL3.i386.rpm source: updates/SRPMS/vixie-cron-4.1-19.EL3.src.rpm You may upd...

CentOS Errata and Security Advisory CESA-2007:0345 vixie-cron security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/vixie-cron-4.1-19.EL3.x86_64.rpm source: updates/SRPMS/vixie-cron-4.1-19.EL3.src.rpm You...

CentOS Errata and Security Advisory CESA-2006:0117 vixie-cron security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0117.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vixie-cron-4.1-10.EL3.i386.rpm source: updates/SRPMS/vixie-cron-4.1-10.EL3.src.rpm You may upd...

CentOS Errata and Security Advisory CESA-2006:0117 vixie-cron security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2006-0117.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/vixie-cron-4.1-10.EL3.x86_64.rpm source: updates/SRPMS/vixie-cron-4.1-10.EL3.src.rpm You...

Hi, Recently there have been advisories and patches for SuSE and RedHat (and probably a few others) regarding a vulnerability in Vixie Cron. The details say that there's insufficient checking of the return value of setuid, which can lead to priviledge escalation and lets users run cron jobs with root priviledges. As far as I know, FreBSD also uses Vixie Cron (at least the cron(8) manpage says so). However, I haven't se...

I'm having a problem with the new vixie-cron rpm for CentOS 4.1 when updating via yum. It complains with the message: Error: Missing Dependency: pam >= 0.77-66.8 is needed by package vixie-cron I got this error from calling 'yum update' on a clean install from the 4.1 isos. This version of pam is available in the 4.2 beta...

The problem with vixie cron is wider (and more funny) than I expected. Here''s my proggy which allows hiding files of any kind and size into crontab entries (remember, quota is ignored ;-): -- cron_put -- #!/bin/bash echo "Vixie cron 3.0.1 file storage - put utlility" echo "by Michal Zalewski &l...

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: vixie-cron-4.1-47.EL4.x86_64.rpm src: vixie-cron-4.1-47.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://lists.centos.org/pipermai...

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: vixie-cron-4.1-47.EL4.i386.rpm src: vixie-cron-4.1-47.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://lists.centos.org/pipermail/ce...

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-19.EL3.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-19.EL3.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-s...

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-47.EL4.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-47.EL4.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-s...

CentOS Errata and Security Advisory 2007:0345 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64 f8f084b455be39b5404a143a111781d6 vixie-cron-4.1-70.el5.x86_64.rpm Source: 8996fc9b53daa14704b6dca9edeb4f74 vixie-cron-4.1-70.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos at irc.freenode.net

CentOS Errata and Security Advisory 2007:0345 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386 c775ebad426971e3c2df5a62b1d91960 vixie-cron-4.1-70.el5.i386.rpm Source: 8996fc9b53daa14704b6dca9edeb4f74 vixie-cron-4.1-70.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos at irc.freenode.net

CentOS Errata and Security Advisory 2006:0539 https://rhn.redhat.com/errata/RHSA-2006-0539.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-44.EL4.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-44.EL4.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-s...

CentOS Errata and Security Advisory 2006:0539 https://rhn.redhat.com/errata/RHSA-2006-0539.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: vixie-cron-4.1-44.EL4.x86_64.rpm src: vixie-cron-4.1-44.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://lists.centos.org/pipermail/...

CentOS Errata and Security Advisory 2006:0539 https://rhn.redhat.com/errata/RHSA-2006-0539.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: vixie-cron-4.1-44.EL4.i386.rpm src: vixie-cron-4.1-44.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://lists.centos.org/pipermail/ce...

CentOS Errata and Security Advisory 2006:0117 https://rhn.redhat.com/errata/RHSA-2006-0117.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-10.EL3.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-10.EL3.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://iki.fi/upi/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not a...

CentOS Errata and Security Advisory 2005:361 https://rhn.redhat.com/errata/RHSA-2005-361.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-36.EL4.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-36.EL4.s390x.rpm -- Pasi Pirhonen - upi@iki.fi - http://iki.fi/upi/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not avai...