CVE-2003-0289

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.06%

Published

Jun 16, 2003

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBCDRTools CDRecord 1.11/2.0 - Devname Format String Exploit-DBCDRTools CDRecord 2.0 (Mandrake / Slackware) - Local Privilege Escalation

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.

Affected Products (2)

cdrtools · cdrecordvulnerable

References (16)

ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz

http://forums.gentoo.org/viewtopic.php?t=54904

http://marc.info/?l=bugtraq&m=105285564307225&w=2

http://marc.info/?l=bugtraq&m=105286031812533&w=2

http://www.mandriva.com/security/advisories?name=MDKSA-2003:058

http://www.securiteam.com/exploits/5ZP0C2AAAC.html

http://www.securityfocus.com/bid/7565

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/12007