Description
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Exploits (2)
References (8)
Scores
EPSS
0.0013
EPSS Percentile
32.0%
Details
Status
published
Products (2)
cdrtools/cdrecord
1.11
cdrtools/cdrecord
2.0
Published
Jun 16, 2003
Tracked Since
Feb 18, 2026