OK, a bug in cron has recently produced a root exploit. What a crappy software, it should be moved to contrib.
There's no evidence that cron has another one just waiting to happen.
People on linux-security-audit *have* said that about proftpd, and that was said before the most recent security hole was discovered. Rather proving them right, wouldn't you say?
--
Joel Klecker (aka Espy) Debian GNU/Linux Developer
<URL:mailto:[EMAIL PROTECTED]> <URL:mailto:[EMAIL PROTECTED]>
<URL:http://web.espy.org/> <URL:http://www.debian.org/>