CVE-2004-0806

Related Files

readcd_exp.sh

Posted Sep 13, 2004

Authored by newbug | Site chroot.org

Local root exploit for readcd that comes setuid default on some Linux distributions.

tags | exploit, local, root

systems | linux

advisories | CVE-2004-0806

SHA-256 | ebf6074259a64754f450086d3b5f185f63aadb539439f649e0aa62d989444041

Download | Favorite | View

cdr_exp.sh

Posted Sep 10, 2004

Authored by newbug

Local root exploit for cdrecord, which fails to drop euid=0 when it exec()s a program specified by the user through the RSH environment variable.

tags | exploit, local, root

advisories | CVE-2004-0806

SHA-256 | 2871e27ea81a6a71a847badaf4a16cae0b8f374ea8a414b249ac51d9cffa940d

Download | Favorite | View

MDKSA-2004:091.txt

Posted Sep 10, 2004

Authored by Max Vozeler | Site mandrakesoft.com

Mandrake Linux Security Update Advisory - The cdrecord program, which is suid root, fails to drop euid=0 when it exec()s a program specified by the user through the RSH environment variable. This can be abused by a local attacker to obtain root privileges.

tags | advisory, local, root

systems | linux, mandrake

advisories | CVE-2004-0806

SHA-256 | 6f38c8ce8d76f1228e8d3ca2e1b81434d0f2613330175e2b3a098eeec3ceb160

Download | Favorite | View