Published: 25/03/2002 Updated: 18/10/2016

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 740

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
andreas mueller cdrdao 1.1.4
andreas mueller cdrdao 1.1.5

source: wwwsecurityfocuscom/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems It is maintained by Andreas Mueller When CDRDAO saves it's configuration to the cdrdao file in a user's home directory, the file is saved with root ownership Addition ...

source: wwwsecurityfocuscom/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems It is maintained by Andreas Mueller When CDRDAO saves it's configuration to the cdrdao file in a user's home directory, the file is saved with root ownership Additi ...

source: wwwsecurityfocuscom/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems It is maintained by Andreas Mueller When CDRDAO saves it's configuration to the cdrdao file in a user's home directory, the file is saved with root ownership Additional ...

source: wwwsecurityfocuscom/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems It is maintained by Andreas Mueller When CDRDAO saves it's configuration to the cdrdao file in a user's home directory, the file is saved with root ownership Additionally ...

NVD-CWE-Other http://www.securityfocus.com/bid/3865 http://marc.info/?l=bugtraq&m=101102759631000&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/21218/

CVE-2002-0137

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect