Files
cve/2004/CVE-2004-0806.md
T
0xMarcio e9a692de92 Remove links to the retired CIS OVAL Repository
Thirty of thirty sampled returned 404: the service is gone, so all 942
links across 911 entries are permanently dead. 576 entries held nothing
else and drop out of the search index rather than offering a reader a
guaranteed miss.
2026-08-31 00:27:36 +02:00

676 B

CVE-2004-0806

Description

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.