similar to: vixie crontab

[Mod: Sent to linux-security instead of linux alert -- alex] Dave G. <daveg@ESCAPE.COM> wrote: > /* vixie crontab buffer overflow for RedHat Linux > * > * I dont think too many people know that redhat uses vixie crontab. > * I didn''t find this, just exploited it. The vulnerability involves an unguarded sscanf call in env.c. Enlarging the buffer to the largest

/* vixie crontab buffer overflow for RedHat Linux * * I dont think too many people know that redhat uses vixie crontab. * I didn''t find this, just exploited it. * * * Dave G. * <daveg@escape.com> * http://www.escape.com/~daveg * * */ #include <stdio.h> #include <sys/types.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #define

The problem with vixie cron is wider (and more funny) than I expected. Here''s my proggy which allows hiding files of any kind and size into crontab entries (remember, quota is ignored ;-): -- cron_put -- #!/bin/bash echo "Vixie cron 3.0.1 file storage - put utlility" echo "by Michal Zalewski <lcamtuf@staszic.waw.pl>" echo if [ "$1" = "" ];

Hi On 6/10/09, James Bensley <jwbensley at gmail.com> Hi all, I don't know what exactly is causing this, but I can't find cron / crontab on my CentOS 5.3 machine. Yes, I know, it's an obvious one, install it. But, it is, according to rpm: [root at zaxen01 ~]# rpm -aq | grep cron anacron-2.3-45.el5.centos crontabs-1.10-8 I have tried yum update crontabs, and then it said there

We have a cron job that needs to run every 15 minutes throughout business hours. The first run is at 8:00, the last run is at 17:00. Is it possible to specify this time range in a single line? */15 8-17 * * 1-5 will run 8:00 - 17:45. That's not what I want. Likewise */15 8-16 * * 1-5 will have the last run at 16:45, not 17:00 This is more of a brainteaser than a real problem. I can

Dear Expert, Is there any settings in rsync to run the command automatically in crontab? i've setup the crontab and create the ssh key to ignore the password prompt, but it seems like the rsync didn't works well. the crontab setting is like this: * */2 * * * /usr/bin/rsync -avzporg --stats root@10.1.1.1:/home/email/ /home/data-email/ if i run this manually, it works, im using redhat 8.0

Hi there fellow hackers, geeks and others who want the UNIX desktop to succeed. I bring forward the question whether or not a (freedesktop.org) specification is necessary for application scheduling software. The current UNIX Desktop user does not have an easy way to configure the tasks which he wants to schedule. Sure we have such a utility. And sure we can shout to our Desktop users

CentOS Errata and Security Advisory CESA-2007:0345 vixie-cron security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vixie-cron-4.1-19.EL3.i386.rpm source: updates/SRPMS/vixie-cron-4.1-19.EL3.src.rpm You may update your CentOS-3 i386 installations by

CentOS Errata and Security Advisory CESA-2007:0345 vixie-cron security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/vixie-cron-4.1-19.EL3.x86_64.rpm source: updates/SRPMS/vixie-cron-4.1-19.EL3.src.rpm You may update your CentOS-3 x86_64

CentOS Errata and Security Advisory CESA-2006:0117 vixie-cron security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0117.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vixie-cron-4.1-10.EL3.i386.rpm source: updates/SRPMS/vixie-cron-4.1-10.EL3.src.rpm You may update your CentOS-3 i386 installations by

CentOS Errata and Security Advisory CESA-2006:0117 vixie-cron security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2006-0117.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/vixie-cron-4.1-10.EL3.x86_64.rpm source: updates/SRPMS/vixie-cron-4.1-10.EL3.src.rpm You may update your CentOS-3 x86_64

Hi all. Can anyone help me with scheduling tasks? I'm running Centos4.2 (updated via yum starting from 4.0). I know I have vixie-cron and anacron packages installed (came like that, from first install, I guess). I read the crontab syntax man page (man 5 crontab) and I made an entry as a normal user (using crontab -e) that looks like the following: 30 0 9 1 1 /bin/ls -F /home/jose >

Hi; I have the following in crontab -eu root: @daily /usr/local/bin/mysql-backup- daily.sh @weekly /usr/local/bin/mysql-backup-weekly.sh @monthly /usr/local/bin/mysql-backup-monthly.sh [root at 13gems globalsolutionsgroup.vi]# ls /usr/local/bin/mysql-* /usr/local/bin/mysql-daily.sh /usr/local/bin/mysql-monthly.sh /usr/local/bin/mysql-weekly.sh These scripts worked on another server. The daily

Hi, Recently there have been advisories and patches for SuSE and RedHat (and probably a few others) regarding a vulnerability in Vixie Cron. The details say that there's insufficient checking of the return value of setuid, which can lead to priviledge escalation and lets users run cron jobs with root priviledges. As far as I know, FreBSD also uses Vixie Cron (at least the cron(8) manpage

I'm having a problem with the new vixie-cron rpm for CentOS 4.1 when updating via yum. It complains with the message: Error: Missing Dependency: pam >= 0.77-66.8 is needed by package vixie-cron I got this error from calling 'yum update' on a clean install from the 4.1 isos. This version of pam is available in the 4.2 beta repository, but not the 4.1 repository. Did something

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Buffer overflow in cron daemon Advisory ID: RHSA-1999:030-01 Issue date: 1999-08-25 Updated on: Keywords: vixie-cron crond MAILTO Cross references: --------------------------------------------------------------------- 1. Topic: A buffer overflow exists in crond, the cron

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: vixie-cron-4.1-47.EL4.x86_64.rpm src: vixie-cron-4.1-47.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: vixie-cron-4.1-47.EL4.i386.rpm src: vixie-cron-4.1-47.EL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-19.EL3.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-19.EL3.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

CentOS Errata and Security Advisory 2007:0345 https://rhn.redhat.com/errata/RHSA-2007-0345.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/vixie-cron-4.1-47.EL4.s390.rpm s390x: updates/s390x/RPMS/vixie-cron-4.1-47.EL4.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored