CNCVE编号：CNCVE-20010559 CVE编号：CAN-2001-0559 安全级别：高 漏洞中文描述： Vixie cron 3.0.1及其早期版本中的crontab在解析修改操作失败后不能正确的注销权限，这允许本地攻击者调用编辑器来纠正错误的时候获得额外的权限。 漏洞英文描述： crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error. 漏洞参考： Reference: BUGTRAQ:20010507 Vixie cron vulnerability Reference: URL:http://www.securityfocus.com/archive/1/183029 Reference: DEBIAN:DSA-054 Reference: URL:http://www.debian.org/security/2001/dsa-054 Reference: MANDRAKE:MDKSA-2001:050 Reference: URL 系统类型：其他 漏洞类型：设计错误