A vulnerability has been identified in Fedora, which could be exploited by local attackers to manipulate certain information. This issue is caused due to a race condition in the way vixie-cron and cronie used to set up timestamp for crontab files when editing the files, which could allow malicious users to manipulate timestamps, potentially leading to a denial of service condition.

Affected Products

Fedora 12

Solution

Upgrade the affected package (cronie) :
http://docs.fedoraproject.org/yum/

References

http://www.vupen.com/english/advisories/2010/0467
https://bugzilla.redhat.com/show_bug.cgi?id=565809
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035762.html

Credits

Vulnerability reported by Dan Rosenberg.

Changelog

2010-02-25 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.