CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed...
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Exploit likelihood
What each source reports
NVD Score used
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
- Record
CVE-2001-0559- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
- Record
CVE-2001-0559- Updated
- 2026-11-02
EUVDEUVD-2001-0551 No score
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
- Record
EUVD-2001-0551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxwc-wcp3-hfp4 No score
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed...
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
- Record
GHSA-xxwc-wcp3-hfp4- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Vixie Cron crontab 3.0 - Privilege Lowering Failure (1) | 2001-05-07 |
| Exploit-DB | Vixie Cron crontab 3.0 - Privilege Lowering Failure (2) | 2001-07-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0559 is a high vulnerability (CVSS 7.2) in Paul Vixie Vixie Cron, published August 14, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.10%, the 65th percentile. No source names a fixed version.
References
linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3
novell.com/linux/security/advisories/2001_017_cron_txt.html
securityfocus.com/archive/1/183029
debian.org/security/2001/dsa-054
exchange.xforce.ibmcloud.com/vulnerabilities/6508
nvd.nist.gov/vuln/detail/CVE-2001-0559
github.com/advisories/GHSA-xxwc-wcp3-hfp4