[19176] in bugtraq
Re: vixie cron possible local root compromise
daemon@ATHENA.MIT.EDU (Mark van Reijn)
Tue Feb 13 00:23:57 2001
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Message-Id: <MWMail.qictdfos@host.none>
Date: Mon, 12 Feb 2001 22:14:00 +0100
Reply-To: Mark van Reijn <mark@EDUP.TUDELFT.NL>
From: Mark van Reijn <mark@EDUP.TUDELFT.NL>
To: BUGTRAQ@SECURITYFOCUS.COM
Hmm, doesn't do anything weird/wrong on my RH6.2 server:
[aaaaaaaaaabbbbbbbbbbcccccccccc@obelix mark]$ crontab -e
no crontab for aaaaaaaaaabbbbbbbbbbaaaaaaaaaabbbbbbbbbbaaaaaaaaaab - using an empty one
crontab: installing new crontab
[aaaaaaaaaabbbbbbbbbbcccccccccc@obelix mark]$ crontab
crontab: usage error: file name must be specified for replace
usage: crontab [-u user] file
crontab [-u user] { -e | -l | -r }
(default operation is replace, per 1003.2)
-e (edit user's crontab)
-l (list user's crontab)
-r (delete user's crontab)
[aaaaaaaaaabbbbbbbbbbcccccccccc@obelix mark]$
It runs vixie-cron-3.0.1-40...
Mark
--
___________________________
Mark van Reijn
mark@edup.tudelft.nl
___________________________
"Because light travels faster than sound, most people appear to be intelligent,
until you hear them speak"