CVE-2010-0424: Fedorahosted Cronie

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.

Affected products

• Fedorahosted Cronie: up to and including 1.4.3
• Paul Vixie Vixie Cron: any version

Published 2010-02-25. Last modified 2026-06-16.