CVE:CVE-1999-0769
CNNVD:CNNVD-199908-052
基于Linux系统的Vixie Cron存在漏洞。本地用户可以借助MAILTO环境变量设置发送邮件命令的参数。
solution:Upgrade paul_vixie vixie_cron to a higher version than 3.0_pl1,and avoid the version 3.0_pl1; Upgrade caldera openlinux to a higher version than 2.2,and avoid the version 2.2; Upgrade debian debian_linux to a higher version than 2.1,2.2,and avoid the version 2.1,2.2; Upgrade redhat linux to a higher version than 4.0,4.1,4.2,5.0,5.1,5.2,6.0,and avoid the version 4.0,4.1,4.2,5.0,5.1,5.2,6.0