CVE-2004-0806 cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local use...
HighCVSS 7.2
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdrtools cdrecord | = 1.11 | No fix listed |
| cdrtools cdrecord | = 2.0 | No fix listed |
References
- 20040909 Bugtraq: cdrecord local root exploit exploit mailing-list
- 12481 third-party-advisory vendor-advisory
- 19532 third-party-advisory
- 1011091 vdb-entry
- 20040910 CAU-EX-2004-0002: cdrecord-suidshell.sh exploit mailing-list
- VU#700326 third-party-advisory us-government-resource
- MDKSA-2004:091 vendor-advisory
- 11075 exploit patch vdb-entry
- FLSA:2058 vendor-advisory
- cdrecord-rsh-gain-privileges(17303) vdb-entry
- oval:org.mitre.oval:def:9805 signature vdb-entry