 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2003-0289 |
| Description: | Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.50717 1.3.6.1.4.1.25623.1.0.50719 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2003-0289 BugTraq ID: 7565 http://www.securityfocus.com/bid/7565 Bugtraq: 20030513 Cdrecord_local_root_exploit. (Google Search) http://marc.info/?l=bugtraq&m=105286031812533&w=2 Bugtraq: 20030513 cdrtools2.0 Format String Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=105285564307225&w=2 http://forums.gentoo.org/viewtopic.php?t=54904 http://www.mandriva.com/security/advisories?name=MDKSA-2003:058 http://www.securiteam.com/exploits/5ZP0C2AAAC.html XForce ISS Database: cdrtools-scsiopen-format-string(12007) https://exchange.xforce.ibmcloud.com/vulnerabilities/12007 |