GCVE - cpe:2.3:a:paul_vixie:vixie

Approved changes feed: RSS · Atom

cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Paul Vixie (`c0701b34-96c4-5028-8df2-0556173a164b`)
Product	Vixie Cron (`b22450ed-c1a0-576b-b701-a832919ccc1d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/cron`	purl2cpe	2026-06-01 10:14:03.505922
`pkg:deb/ubuntu/cron`	purl2cpe	2026-06-01 10:14:03.505924
`pkg:github/vixie/cron`	purl2cpe	2026-06-01 10:14:03.505925
`pkg:rpm/opensuse/cron`	purl2cpe	2026-06-01 10:14:03.505927

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0424`	vulnerable	2026-06-08 04:52:02.413101	Details available The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory. Published: 2010-02-25T19:00:00.000Z Updated: 2024-08-07T00:45:12.337Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=565809 http://secunia.com/advisories/38700 http://git.fedorahosted.org/git/cronie.git?p=cronie.git%3Ba=commit%3Bh=9e4a8fa5f9171fb724981f53879c9b20264aeb61 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035762.html http://secunia.com/advisories/38741	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1856`	vulnerable	2026-06-08 04:49:43.640860	Details available Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c. Published: 2007-04-18T02:20:00.000Z Updated: 2024-08-07T13:13:41.102Z Open on db.gcve.eu Reference links http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html http://secunia.com/advisories/27886 http://www.vupen.com/english/advisories/2007/3229 http://www.novell.com/linux/security/advisories/2007_007_suse.html http://www.securitytracker.com/id?1018081	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0560`	vulnerable	2026-06-08 04:45:20.500764	Details available Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters). Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:21:38.573Z Open on db.gcve.eu Reference links http://www-1.ibm.com/support/search.wss?rs=0&q=IY17261&apar=only http://www.osvdb.org/5583 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-022.php3 http://archives.neohapsis.com/archives/linux/immunix/2001-q1/0066.html http://www.redhat.com/support/errata/RHSA-2001-014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0559`	vulnerable	2026-06-08 04:45:20.500349	Details available crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:21:38.708Z Open on db.gcve.eu Reference links http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3 http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html http://www.securityfocus.com/archive/1/183029 http://www.debian.org/security/2001/dsa-054 http://www.securityfocus.com/bid/2687	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Vixie Cron

Notes

PURL mappings

Vulnerability references

Contribute