CVE-2010-0424

CVE Details

Release Date:	2010-02-25
Impact:	None	What is this?

Description

The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.

See more information about CVE-2010-0424 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	3.3
Vector String:	AV:L/AC:M/Au:N/C:N/I:P/A:P
Version:	2.0
Attack Vector:	Local
Attack Complexity:	Medium
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	Partial
Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle Linux version 5 (vixie-cron)	ELSA-2012-0304	2012-03-01