CVE-2010-0424: The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local...

Security readout for executives and security teams

This is a local denial-of-service issue in cron tooling. A user with local access could abuse temporary-file handling while editing crontabs to change modification times on arbitrary files through a symlink. The sources do not show remote access, privilege escalation, or confirmed active exploitation. Exposure is most likely on older Unix/Linux systems using vulnerable cronie versions before 1.4.4 or affected Vixie cron packages. Internet-facing exposure is not indicated; the attacker must already have local user access. Treat as a targeted legacy hardening item, not an emergency internet-facing incident. Prioritize shared servers, hosting environments, labs, and older systems with local users, because the impact depends on existing local access. Mitigation focus: Upgrade cronie to 1.4.4 or a vendor-fixed package where applicable.; Check vendor advisories for affected Vixie cron package fixes.; Prioritize multi-user systems where untrusted local shell access exists..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.