CVE-2003-0289

cdrecord <2.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by anonymous · perllocallinux
https://www.exploit-db.com/exploits/31
exploitdb WORKING POC VERIFIED
by CMN · clocallinux
https://www.exploit-db.com/exploits/22594

Scores

EPSS 0.0013
EPSS Percentile 32.0%

Details

Status published
Products (2)
cdrtools/cdrecord 1.11
cdrtools/cdrecord 2.0
Published Jun 16, 2003
Tracked Since Feb 18, 2026