CVE

Id
9234  
CVE No.
CVE-2004-0806  
Status
Candidate  
Description
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.  
Phase
Assigned (20040825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60879 9234 CVE-2004-0806 BUGTRAQ:20040909 Bugtraq: cdrecord local root exploit  View
60880 9234 CVE-2004-0806 URL:http://seclists.org/lists/bugtraq/2004/Sep/0097.html  View
60881 9234 CVE-2004-0806 BUGTRAQ:20040910 CAU-EX-2004-0002: cdrecord-suidshell.sh  View
60882 9234 CVE-2004-0806 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html  View
60883 9234 CVE-2004-0806 FEDORA:FLSA:2058  View
60884 9234 CVE-2004-0806 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2058  View
60885 9234 CVE-2004-0806 MANDRAKE:MDKSA-2004:091  View
60886 9234 CVE-2004-0806 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:091  View
60887 9234 CVE-2004-0806 SGI:20060401-01-U  View
60888 9234 CVE-2004-0806 URL:ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U  View
60889 9234 CVE-2004-0806 CERT-VN:VU#700326  View
60890 9234 CVE-2004-0806 URL:http://www.kb.cert.org/vuls/id/700326  View
60891 9234 CVE-2004-0806 BID:11075  View
60892 9234 CVE-2004-0806 URL:http://www.securityfocus.org/bid/11075  View
60893 9234 CVE-2004-0806 OVAL:oval:org.mitre.oval:def:9805  View
60894 9234 CVE-2004-0806 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9805  View
60895 9234 CVE-2004-0806 SECTRACK:1011091  View
60896 9234 CVE-2004-0806 URL:http://securitytracker.com/id?1011091  View
60897 9234 CVE-2004-0806 SECUNIA:12481  View
60898 9234 CVE-2004-0806 URL:http://secunia.com/advisories/12481/  View
60899 9234 CVE-2004-0806 SECUNIA:19532  View
60900 9234 CVE-2004-0806 URL:http://secunia.com/advisories/19532  View
60901 9234 CVE-2004-0806 XF:cdrecord-rsh-gain-privileges(17303)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63035 JVNDB-2004-000377 Samba における不正な認証リクエストによるサービス運用妨害 (DoS) の脆弱性 Samba には、不正な認証リクエストを受信すると、新たに生成された smbd プロセスが無限ループに陥ってしまう脆弱性が存在します。 CVE-2004-0807 9234 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000377.html  View