Exploitation Summary
EIP tracks 2 public exploits for CVE-2001-0559. PoCs published by cairnsc, Sebastian Krahmer.
AI-analyzed exploit summary This exploit leverages a privilege-dropping failure in Vixie cron's crontab utility (CVE-2001-0559) to gain root privileges. It compiles a setuid shell wrapper and manipulates the editor invocation to escalate privileges.
Description
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Exploits (2)
This exploit leverages a privilege-dropping failure in Vixie cron's crontab utility (CVE-2001-0559) to gain root privileges. It compiles a setuid shell wrapper and manipulates the editor invocation to escalate privileges.
This exploit targets a privilege escalation vulnerability in Vixie cron (CVE-2001-0559) where crontab fails to drop privileges correctly after a parsing error. It compiles a helper binary to spawn a root shell if the exploit succeeds.