Ubuntu Security Notice 289-1: Vixie Cron allows local users to execute programs as root.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47175/USN-289-1.txt
Source: https://packetstormsecurity.com/files/47175/Ubuntu-Security-Notice-289-1.html