CVE-2006-2607

no score yetEPSS 0.6%

do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
Published: 2006-05-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

paul_vixie:vixie_cron

References

http://bugs.gentoo.org/show_bug.cgi?id=134194
http://secunia.com/advisories/20380
http://secunia.com/advisories/20388
http://secunia.com/advisories/20616
http://secunia.com/advisories/21032

Check your stack JSON