PT-2004-1871
CVE-2004-0806
·
تاريخ النشر
2004-09-14
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
cdrtools versions prior to 2.01
Description
The issue allows local users to gain privileges due to improper handling of privileges when executing a program specified in the
RSH environment variable.Recommendations
For versions prior to 2.01, consider removing the setuid root bit from the cdrecord executable to prevent privilege escalation until a fixed version can be installed.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾