CVE-2005-1038
The MITRE CVE dictionary describes this issue as:
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.
Find out more about CVE-2005-1038 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 4 (vixie-cron) | RHSA-2005:361 | 2005-10-05 |
| Red Hat Enterprise Linux 3 (vixie-cron) | RHSA-2006:0117 | 2006-03-15 |
CVE description copyright © 2017, The MITRE Corporation