Test ID:	1.3.6.1.4.1.25623.1.1.12.2005.100.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-100-1)
Summary:	The remote host is missing an update for the 'cdrtools' package(s) announced via the USN-100-1 advisory.
Description:	Summary: The remote host is missing an update for the 'cdrtools' package(s) announced via the USN-100-1 advisory. Vulnerability Insight: Javier Fernandez-Sanguino Pena noticed that cdrecord created temporary files in an insecure manner if DEBUG was enabled in /etc/cdrecord/rscsi. If the default value was used (which stored the debug output file in /tmp), this could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking cdrecord. Please note that DEBUG is not enabled by default in Ubuntu, so if you did not explicitly enable it, this does not affect you. Affected Software/OS: 'cdrtools' package(s) on Ubuntu 4.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.