Description
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
References
- 20020112 cdrdao insecure filehandling mailing-list
- 20020115 Re: cdrdao insecure filehandling mailing-list
Unscored
CVE-2002-0138
EUVD-2002-0138GHSA-gpmc-g7jp-6j5p
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
Published Mar 15, 2002 · Updated Aug 8, 2024 · Assigned by mitre