Description
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Metrics
CVSS 2.0 7.2/10
AV:L/AC:L/Au:N/C:C/I:C/A:CAffected software
No affected versions have been published.
Timeline
- Published
- Jun 16, 2003
- Last modified
- Jun 16, 2026
- NVD status
- Modified