Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Red Hat 6.0: RHSA-1999:030-02 Critical: Vixie-Cron Buffer Overflow

red hat
Calendar Grey December 7, 1999
Dist Redhat Esm H88
The latest advisory from Red Hat regarding vixie-cron tackles a critical buffer overflow flaw that enables local users to gain unauthorized privileges.
1999-08-27: Updated packages to fix problems on Red Hat Linux 4.2 and 5.2, added credits, remove statement about 'no known exploits'

Solution



For each RPM for your particular architecture, run:


rpm -Uvh filename


where filename is the name of the RPM.


Then restart cron by typing:


/etc/rc.d/init.d/crond restart



9. Verification:


 MD5 sum                           Package Name


804bec06a0f2b25665c9f77b0c03cf4e  i386/vixie-cron-3.0.1-38.i386.rpm

fd3e80ae1c8a2ab84bcbcfe338fe8a92  alpha/vixie-cron-3.0.1-38.alpha.rpm

587e2cee6ab190f6bf9d1727b1bc48bc  sparc/vixie-cron-3.0.1-38.sparc.rpm

1197fe2e1db1591221a27738c2d812d4  SRPMS/vixie-cron-3.0.1-38.src.rpm

These packages are also PGP signed by Red Hat Inc. for security. Our

key is available at:





You can verify each package with the following command:


rpm --checksig filename


If you only wish to verify that each package has not been corrupted or

tampered with, examine only the md5sum with the following command:


rpm --checksig --nopgp filename







Summary

Topics%20covered

Topics Covered

security advisory buffer overflow red hat local privilege critical exploit vixie-cron

References


Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Topic

Topics%20covered

Topics Covered

security advisory buffer overflow red hat local privilege critical exploit vixie-cron

Relevant Releases Architectures

Red Hat Linux 6.0, all architectures

4. Obsoleted by:

None

5. Conflicts with:

None

6. RPMs required:

Intel:

vixie-

cron-3.0.1-38.i386.rpm

Alpha:

vixie-cron-3.0.1-38.alpha.rpm

SPARC:

vixie-cron-3.0.1-38.sparc.rpm

Source:

vixie-

cron-3.0.1-38.src.rpm

Architecture neutral:

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here