Filtered by vendor Cdrtools Subscriptions
Filtered by product Cdrecord Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-0866 1 Cdrtools 1 Cdrecord 2024-11-20 N/A
cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2004-0806 2 Cdrtools, Redhat 2 Cdrecord, Enterprise Linux 2024-11-20 N/A
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.
CVE-2003-0289 1 Cdrtools 1 Cdrecord 2024-11-20 N/A
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.