CVE-2003-0289 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0289
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0289

Description: Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/12007 MISC http://www.securiteam.com/exploits/5ZP0C2AAAC.html MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2003:058 GENTOO http://forums.gentoo.org/viewtopic.php?t=54904 CONFIRM BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=105286031812533&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2 BID 7565

Return to the previous page.