Executive Summary
| Summary | |
|---|---|
| Title | Vixie cron: Denial of Service |
| Informations | |||
|---|---|---|---|
| Name | GLSA-201311-04 | First vendor Publication | 2013-11-07 |
| Vendor | Gentoo | Last vendor Modification | 2013-11-07 |
| Severity (Vendor) | Normal | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:M/Au:N/C:N/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 3.3 | Attack Range | Local |
| Cvss Impact Score | 4.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 3.4 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Synopsis A vulnerability has been found in Vixie cron, allowing local attackers to conduct symlink attacks. Background Description Impact Workaround Resolution References Availability http://security.gentoo.org/glsa/glsa-201311-04.xml |
Original Source
| Url : http://security.gentoo.org/glsa/glsa-201311-04.xml |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-59 | Improper Link Resolution Before File Access ('Link Following') |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:27210 | |||
| Oval ID: | oval:org.mitre.oval:def:27210 | ||
| Title: | RHSA-2012:0304 -- vixie-cron security, bug fix, and enhancement update (Low) | ||
| Description: | The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. The vixie-cron package adds improved security and more powerful configuration options to the standard version of cron. A race condition was found in the way the crontab program performed file time stamp updates on a temporary file created when editing a user crontab file. A local attacker could use this flaw to change the modification time of arbitrary system files via a symbolic link attack. (CVE-2010-0424) Red Hat would like to thank Dan Rosenberg for reporting this issue. This update also fixes the following bugs: * Cron jobs of users with home directories mounted on a Lightweight Directory Access Protocol (LDAP) server or Network File System (NFS) were often refused because jobs were marked as orphaned (typically due to a temporary NSS lookup failure, when NIS and LDAP servers were unreachable). With this update, a database of orphans is created, and cron jobs are performed as expected. (BZ#455664) * Previously, cron did not log any errors if a cron job file located in the /etc/cron.d/ directory contained invalid entries. An upstream patch has been applied to address this problem and invalid entries in the cron job files now produce warning messages. (BZ#460070) * Previously, the "@reboot" crontab macro incorrectly ran jobs when the crond daemon was restarted. If the user used the macro on multiple machines, all entries with the "@reboot" option were executed every time the crond daemon was restarted. With this update, jobs are executed only when the machine is rebooted. (BZ#476972) * The crontab utility is now compiled as a position-independent executable (PIE), which enhances the security of the system. (BZ#480930) * When the parent crond daemon was stopped, but a child crond daemon was running (executing a program), the "service crond status" command incorrectly reported that crond was running. The source code has been modified, and the "service crond status" command now correctly reports that crond is stopped. (BZ#529632) * According to the pam(8) manual page, the cron daemon, crond, supports access control with PAM (Pluggable Authentication Module). However, the PAM configuration file for crond did not export environment variables correctly and, consequently, setting PAM variables via cron did not work. This update includes a corrected /etc/pam.d/crond file that exports environment variables correctly. Setting pam variables via cron now works as documented in the pam(8) manual page. (BZ#541189) * Previously, the mcstransd daemon modified labels for the crond daemon. When the crond daemon attempted to use the modified label and mcstransd was not running, crond used an incorrect label. Consequently, Security-Enhanced Linux (SELinux) denials filled up the cron log, no jobs were executed, and crond had to be restarted. With this update, both mcstransd and crond use raw SELinux labels, which prevents the problem. (BZ#625016) * Previously, the crontab(1) and cron(8) manual pages contained multiple typographical errors. This update fixes those errors. (BZ#699620, BZ#699621) In addition, this update adds the following enhancement: * Previously, the crontab utility did not use the Pluggable Authentication Module (PAM) for verification of users. As a consequence, a user could access crontab even if access had been restricted (usually by being denied in the access.conf file). With this update, crontab returns an error message that the user is not allowed to access crontab because of PAM configuration. (BZ#249512) All vixie-cron users should upgrade to this updated package, which resolves these issues and adds this enhancement. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2012:0304 CVE-2010-0424 | Version: | 3 |
| Platform(s): | Red Hat Enterprise Linux 5 | Product(s): | vixie-cron |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:27512 | |||
| Oval ID: | oval:org.mitre.oval:def:27512 | ||
| Title: | ELSA-2012-0304 -- vixie-cron security, bug fix, and enhancement update (low) | ||
| Description: | [4:4.1-81] - 455664 adoptions of crontab orphans, forgot add buffer for list of orphans - Related: rhbz#455664 | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2012-0304 CVE-2010-0424 | Version: | 3 |
| Platform(s): | Oracle Linux 5 | Product(s): | vixie-cron |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-02-21 | Name : RedHat Update for vixie-cron RHSA-2012:0304-03 File : nvt/gb_RHSA-2012_0304-03_vixie-cron.nasl |
| 2010-03-22 | Name : Fedora Update for cronie FEDORA-2010-4300 File : nvt/gb_fedora_2010_4300_cronie_fc11.nasl |
| 2010-03-02 | Name : Fedora Update for cronie FEDORA-2010-2751 File : nvt/gb_fedora_2010_2751_cronie_fc12.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 62551 | cronie crontab.c edit_cmd Function Temporary File Symlink Local Privilege Esc... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-11-17 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0168.nasl - Type : ACT_GATHER_INFO |
| 2013-11-07 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-04.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2012-0304.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120221_vixie_cron_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2012-02-21 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0304.nasl - Type : ACT_GATHER_INFO |
| 2010-10-11 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cron-6865.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-2751.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-3642.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-4300.nasl - Type : ACT_GATHER_INFO |
| 2010-03-19 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_cron-100219.nasl - Type : ACT_GATHER_INFO |
| 2010-03-19 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_cron-100219.nasl - Type : ACT_GATHER_INFO |
| 2010-03-19 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_cron-100219.nasl - Type : ACT_GATHER_INFO |
| 2010-03-19 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_cron-100219.nasl - Type : ACT_GATHER_INFO |
| 2010-03-19 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cron-6864.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:37:52 |
|
| 2013-11-07 05:20:06 |
|
