PT-2005-1894

CVE-2005-0866

Published

2005-03-26

Updated

2018-10-03

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions cdrecord versions prior to 4:2.0

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files when DEBUG is enabled.

Recommendations For versions prior to 4:2.0, disable the DEBUG mode to prevent the symlink attack on temporary files.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾