Description
cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
References
- USN-100-1 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376
Unscored
CVE-2005-0866
EUVD-2005-0867GHSA-4gpq-qp4m-5pqr
cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Published Mar 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre