| Package | Affected versions | Patched versions |
|---|---|---|
| cdrecord | = 1.11= 2.0 |
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free