Cdrtools · Cdrtools · CVE-2003-0289
Name of the Vulnerable Software and Affected Versions:
cdrtools version 2.0
Description:
The issue is related to a format string vulnerability in the scsiopen.c file of the cdrecord program. This vulnerability allows local users to gain privileges by using format string specifiers in the `dev` parameter.
Recommendations:
For cdrtools version 2.0, update to a newer version that contains a fix for this issue to prevent local users from gaining privileges.