CVE-2005-1038
Fixed in a distro release EPSS <1%
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.
Products: paul_vixie vixie_cron, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | vixie-cron | 0:4.1-10.EL3 |
| Red Hat Enterprise Linux 3 | vixie-cron-debuginfo | 0:4.1-10.EL3 |
| Red Hat Enterprise Linux 4 | vixie-cron | 4:4.1-36.EL4 |
| Red Hat Enterprise Linux 4 | vixie-cron-debuginfo | 4:4.1-36.EL4 |