CVE-2000-1096
3.7 · LOWcrontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users wit…
Overview
CVE-2000-1096 is a low-severity vulnerability affecting paul_vixie vixie_cron. It was published on January 9, 2001 and has a CVSS 2.0 base score of 3.7 (LOW).
This vulnerability has a CVSS 2.0 base score of 3.7, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical description
crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.
Remediation
Check the references section for vendor advisories and patches from paul_vixie. Update vixie_cron to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected products
| Vendor | Product | Versions | Status |
|---|
References
How CyberStrike helps
Reason, not just scan
It reasons through your app's logic the way a human pentester would, so it finds flaws signature scanners miss.
Learn moreVerified findings
Every finding is proven exploitable before you see it, which cuts the false positives that bury real risk.
Learn moreAI-driven DAST and SAST
Probe running apps and read source from one engine, so issues are caught before and after they ship.
Learn moreOpen source
Read exactly how it tests and what it reports. CyberStrike is open source and in early access.
View the repo
Frequently asked questions
What is CVE-2000-1096?
CVE-2000-1096 is a low-severity vulnerability affecting paul_vixie vixie_cron. It was published on January 9, 2001 and has a CVSS 2.0 base score of 3.7 (LOW).
How severe is CVE-2000-1096?
This vulnerability has a CVSS 2.0 base score of 3.7, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-1096?
Check the references section for vendor advisories and patches from paul_vixie. Update vixie_cron to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-1096?
CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2000-1096 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.
Related LOW CVEs from 2000
View all- 3.7CVE-2000-0409
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local use
View details - 3.7CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
View details - 3.7CVE-2000-0579
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
View details - 3.7CVE-2000-0799
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
View details - 3.6CVE-2000-0090
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
View details - 3.6CVE-2000-0121
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
View details - 3.6CVE-2000-0472
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
View details - 3.6CVE-2000-0270
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
View details - 3.6CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
View details - 3.6CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available
View details - 3.6CVE-2000-0667
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
View details - 3.6CVE-2000-0802
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w
View details