CVE-2006-2607
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call,...
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
Exploit likelihood
What each source reports
NVD Score used
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
CVE-2006-2607- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
CVE-2006-2607- Updated
- 2026-11-02
EUVDEUVD-2006-2606 No score
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
EUVD-2006-2606- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m6pc-rv4c-hqmg No score
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call,...
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
GHSA-m6pc-rv4c-hqmg- Updated
- 2026-11-02
OSV No score
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
CVE-2006-2607- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-2607 No score
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
- Record
DEBIAN-CVE-2006-2607- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10139-1 No score
cron-4.2-65.4 on GA media
These are all security issues fixed in the cron-4.2-65.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10139-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cronDebian:12 |
before 3.0pl1-64 | 3.0pl1-64 |
cronDebian:13 |
before 3.0pl1-64 | 3.0pl1-64 |
cronDebian:14 |
before 3.0pl1-64 | 3.0pl1-64 |
vixie-cronRed Hat:enterprise_linux:4::as |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cron-debuginfoRed Hat:enterprise_linux:4::as |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cronRed Hat:enterprise_linux:4::desktop |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cron-debuginfoRed Hat:enterprise_linux:4::desktop |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cronRed Hat:enterprise_linux:4::es |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cron-debuginfoRed Hat:enterprise_linux:4::es |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cronRed Hat:enterprise_linux:4::ws |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
vixie-cron-debuginfoRed Hat:enterprise_linux:4::ws |
before 4:4.1-44.EL4 | 4:4.1-44.EL4 |
cronieopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.5.0-65.4 | 1.5.0-65.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2607 is a high vulnerability (CVSS 7.2) in Paul Vixie Vixie Cron, published May 25, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. Fixed in cron 3.0pl1-64.
References
securityfocus.com/archive/1/435033/100/0/threaded
vupen.com/english/advisories/2006/2075
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178431
support.avaya.com/elmodocs2/security/ASA-2006-168.htm
bugs.gentoo.org/show_bug.cgi?id=134194
Show 24 moreShow less
secunia.com/advisories/20388
securitytracker.com/id?1016480
usn.ubuntu.com/778-1
novell.com/linux/security/advisories/2006-05-32.html
security.gentoo.org/glsa/glsa-200606-07.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10213
exchange.xforce.ibmcloud.com/vulnerabilities/26691
redhat.com/support/errata/RHSA-2006-0539.html
nvd.nist.gov/vuln/detail/CVE-2006-2607
github.com/advisories/GHSA-m6pc-rv4c-hqmg
security-tracker.debian.org/tracker/CVE-2006-2607
access.redhat.com/errata/RHSA-2006:0539
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0539.json
cve.org/CVERecord?id=CVE-2006-2607
suse.com/security/cve/CVE-2006-2607