Debian/cron: unknown

do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or reso

Action: Upgrade cron to 3.0pl1-64 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-2607#Debian:13/cron
• https://security-tracker.debian.org/tracker/CVE-2006-2607

published 2006-05-25T20:02:00Z · modified 2026-10-22T23:47:27.630787290Z · JSON