CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2007-1856 – crontab denial of service
https://notcve.org/view.php?id=CVE-2007-1856
18 Apr 2007 — Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c. Vixie Cron anterior a 4.1-r10 en Gentoo Linux es instalado con permisos inseguros, lo cual permite a usuarios locales provocar una denegación de servicio (fallo de cron) creando enlaces duros (hard links), lo cual resulta en el fallo de la comprobación st_nlink en database.c. • http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2001-0560
https://notcve.org/view.php?id=CVE-2001-0560
22 Aug 2001 — Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters). • http://archives.neohapsis.com/archives/bugtraq/2001-02/0197.html •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 4CVE-2001-0559 – Vixie Cron crontab 3.0 - Privilege Lowering Failure
https://notcve.org/view.php?id=CVE-2001-0559
14 Aug 2001 — crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error. • https://www.exploit-db.com/exploits/20822 •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-1999-0297
https://notcve.org/view.php?id=CVE-1999-0297
12 Dec 1996 — Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297 •