Description
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Affected products
- caldera / openlinux2.2 – 2.2
- Debian / debian_linux2.1 – 2.1
- Debian / debian_linux2.2 – 2.2
- paul_vixie / vixie_cron3.0_pl1 – 3.0_pl1
- RedHat / linux5.0 – 5.0
- RedHat / linux5.1 – 5.1
- RedHat / linux5.2 – 5.2
- RedHat / linux6.0 – 6.0
- RedHat / linux4.0 – 4.0
- RedHat / linux4.1 – 4.1
- RedHat / linux4.2 – 4.2
Exploits & proofs of concept
- exploit-dbCaldera OpenLinux 2.2 / Debian 2.1/2.2 / RedHat 6.0 - Vixie Cron MAILTO Sendmailby Olaf Kirch
References
Updated 40m ago · 8 sources