CVE-2004-0806 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2004-0806
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0806

Description: cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/17303 ST 1011091 SGI SAID Secunia Advisory: SA12481 Secunia Advisory: SA19532 MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:091 FEDORA CERT-VN 700326 BUGTRAQ http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html http://seclists.org/lists/bugtraq/2004/Sep/0097.html BID 11075

Return to the previous page.