CVE-2004-0806

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.73% chance of exploitation in the next 30 days, 76th percentile

Published

2004-09-14

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://seclists.org/lists/bugtraq/2004/Sep/0097.html

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/469
• https://www.exploit-db.com/exploits/438

References

• CVE Record
• NVD entry

Related

• CVE-2004-0798
• CVE-2004-0816
• CVE-2004-0795
• CVE-2004-0820
• CVE-2004-0791
• CVE-2004-0824