OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[sec-adv] Conectiva update for vixie-cron

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Apr 18 2003 - 04:09:59 CDT

TITLE:
Conectiva update for vixie-cron

READ ONLINE:
http://www.secunia.com/advisories/8621/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Conectiva Linux 6
Conectiva Linux 7
Conectiva Linux 8

DESCRIPTION:
Conectiva has issued updated packages for vixie-cron. These fix an
old vulnerability (May 2001), which can be exploited by malicious,
local users to escalate their privileges on a vulnerable system.

The vulnerability is caused due to an error in "crontab", since
privileges aren't dropped properly before an editor is invoked when a
parsing error has occured.

SOLUTION:
Updated packages:

-- Conectiva Linux 6.0 --

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/vixie-cron-3.0.1-43U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/vixie-cron-3.0.1-43U60_2cl.src.rpm

-- Conectiva Linux 7.0 --

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/vixie-cron-3.0.1-50U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/vixie-cron-3.0.1-50U70_1cl.src.rpm

-- Conectiva Linux 8 --

ftp://atualizacoes.conectiva.com.br/8/RPMS/vixie-cron-3.0.1-50U80_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/SRPMS/vixie-cron-3.0.1-50U80_1cl.src.rpm

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------