CVE:CVE-1999-0297
CNNVD:CNNVD-199612-009
Vixie Cron library升级到3.0版本时存在安全漏洞。本地用户可以借助一个超长环境变量获取根访问权限。
solution:Upgrade paul_vixie vixie_cron to a higher version than 3.0,and avoid the version 3.0; Upgrade bsdi bsd_os to a higher version than 2.1,and avoid the version 2.1; Upgrade freebsd freebsd to a higher version than 2.1.0,and avoid the version 2.1.0; Upgrade netbsd netbsd to a higher version than 2.0.4,and avoid the version 2.0.4; Upgrade redhat linux to a higher version than *