vulnwire
7.2high

CVE-2004-08062 exploits

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program spec…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 78%
Public exploits
2
Exploit-DB

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

Exploit prediction (EPSS)

1.73% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.

Exploits and detections

  • EDB-469 CDRecord's ReadCD - Local Privilege Escalation · local · 2004-09-19
  • EDB-438 CDRecord's ReadCD - '$RSH exec()' SUID Shell Creation · local · 2004-09-11

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • securityfocus.org /bid/11075 · vdb-entry, x_refsource_BID, x_transferred
  • securitytracker.com /id?1011091 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2004:091 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • seclists.org /lists/bugtraq/2004/Sep/0097.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • derkeiler.com /Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • bugzilla.fedora.us /show_bug.cgi?id=2058 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • kb.cert.org /vuls/id/700326 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/19532 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9805 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/12481/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17303 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.