NVD

Id
71230  
Name
CVE-2004-0806  
Description
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-0806  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367990 71230 CVE-2004-0806 20060401-01-U  View
367991 71230 CVE-2004-0806 oval:org.mitre.oval:def:9805  View
367992 71230 CVE-2004-0806 20040909 Bugtraq: cdrecord local root exploit  View
367993 71230 CVE-2004-0806 1011091  View
367994 71230 CVE-2004-0806 20040910 CAU-EX-2004-0002: cdrecord-suidshell.sh  View
367995 71230 CVE-2004-0806 VU#700326  View
367996 71230 CVE-2004-0806 MDKSA-2004:091  View
367997 71230 CVE-2004-0806 11075  View
367998 71230 CVE-2004-0806 cdrecord-rsh-gain-privileges(17303)  View
367999 71230 CVE-2004-0806 FLSA:2058  View

Related JVN