Vulnerabilities

TI-2005-00809 CVE-2005-0866 · GHSA-4gpq-qp4m-5pqr

cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary…

LOW 11

cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0031 Published 2005-03-26 No fix listed

TI-2004-00744 CVE-2004-0806 · GHSA-gw49-f4qm-3gcc

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not…

LOW 35

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privilege…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01725 Published 2004-09-14 Fixed

TI-2003-00270 CVE-2003-0289 · GHSA-xp7j-9g27-rqpj

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows…

LOW 34

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01059 Published 2003-05-14 No fix listed

Vulnerabilities

Filters

cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary…

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not…

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows…