Gentoo Linux Security Advisory GLSA 200606-07 – Roman Veretelnikov discovered that Vixie Cron fails to properly check whether it can drop privileges accordingly if setuid() in do_command.c fails due to a user exceeding assigned resource limits. Versions less than 4.1-r9 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47176/glsa-200606-07.txt
Source: https://packetstormsecurity.com/files/47176/Gentoo-Linux-Security-Advisory-200606-7.html