PT-2002-1224 · Cdrdao · Cdrdao

Published 2002-03-15 · Updated 2016-10-18 · CVE-2002-0138

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CDRDAO versions 1.1.4 through 1.1.5

Description The issue allows local users to read arbitrary files via the show-data command.

Recommendations For versions 1.1.4 and 1.1.5, consider restricting access to the show-data command until a patch is available.

Fix

Related Identifiers

CVE-2002-0138

Affected Products

Cdrdao

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0138 · Security Note
• http://marc.info/?l=bugtraq&m=101102759631000&w=2 · Note
• http://marc.info/?l=bugtraq&m=101111688819855&w=2 · Note