CVE-2003-0289 Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
HighCVSS 7.2
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdrtools cdrecord | = 1.11 | No fix listed |
| cdrtools cdrecord | = 2.0 | No fix listed |
References
- 200305-06 vendor-advisory
- 20030513 cdrtools2.0 Format String Vulnerability mailing-list
- 20030513 Cdrecord_local_root_exploit. mailing-list
- MDKSA-2003:058 vendor-advisory
- www.securiteam.com
- 7565 exploit patch vdb-entry vendor-advisory
- cdrtools-scsiopen-format-string(12007) vdb-entry