NVD

Id
73424  
Name
CVE-2003-0289  
Description
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2003-06-16  
Modified Date
2017-07-10  
Seq
2003-0289  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378199 73424 CVE-2003-0289 ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz  View
378200 73424 CVE-2003-0289 200305-06  View
378201 73424 CVE-2003-0289 20030513 cdrtools2.0 Format String Vulnerability  View
378202 73424 CVE-2003-0289 20030513 Cdrecord_local_root_exploit.  View
378203 73424 CVE-2003-0289 MDKSA-2003:058  View
378204 73424 CVE-2003-0289 http://www.securiteam.com/exploits/5ZP0C2AAAC.html  View
378205 73424 CVE-2003-0289 7565  View
378206 73424 CVE-2003-0289 cdrtools-scsiopen-format-string(12007)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63662 JVNDB-2003-000395 CDRTools の cdrecord コマンドにおけるフォーマットストリングの脆弱性 CDRTools の cdrecord コマンドにおける scsiopen.c には、dev パラメータのチェックに不備があり、フォーマットストリングバグの脆弱性が存在します。 CVE-2003-0289 7116 CVE-2003-0289 73424 7.2 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000395.html 2003-06-16 2007-07-04 View