CVE-2007-1856: Paul Vixie Vixie Cron

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.

Affected products

• Paul Vixie Vixie Cron: up to and including 4.1

Published 2007-04-18. Last modified 2026-06-16.