CVE-2000-1096

CVE-2000-1096 describes a local privilege escalation vulnerability in Paul Vixie's crontab utility. It arises from the use of predictable temporary file names and improper ownership checks, allowing local users with write access to the crontab spool directory to execute arbitrary commands. This vulnerability has a low CVSS score of 3.7, indicating a local attack vector with high attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While not actively exploited or on any hot lists, public exploit code exists on ExploitDB, though it has garnered no community discussion or media coverage.