SLES 15 — cron — multiple vulnerabilities (4 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 20 December 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2006:027 (see also SUSE bugzilla) Related CVEs: CVE-2006-2607 CVE-2010-0424 CVE-2019-9704 CVE-2019-9705 Upstream summary: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow […]