CVE-2004-0806

This exploit leverages a local privilege escalation vulnerability in cdrecord's readcd utility by manipulating the RSH environment variable to execute arbitrary code as root. It compiles two C programs to set SUID permissions on a shell and then triggers the vulnerability via the readcd command.

This exploit leverages a vulnerability in cdrecord where it executes the $RSH environment variable before dropping privileges. It creates a SUID bash shell by exploiting the insecure execution path.