Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0289. PoCs published by anonymous, CMN.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in Cdrecord versions 2.0 and earlier to achieve local privilege escalation by overwriting the .dtors or GOT exit address with shellcode.
Description
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Exploits (2)
This exploit leverages a format string vulnerability in Cdrecord versions 2.0 and earlier to achieve local privilege escalation by overwriting the .dtors or GOT exit address with shellcode.
This exploit leverages a format string vulnerability in CDRecord (cdrtools 2.0) to achieve arbitrary code execution. It crafts a malicious 'dev' argument to overwrite memory addresses and execute shellcode, targeting setuid-root binaries like cdrecord, readcd, and cdda2wav.