Vulnerability Description
cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score
2.1
LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cdrtools | Cdrecord | <= 2.0 |
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376
- https://usn.ubuntu.com/100-1/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376
- https://usn.ubuntu.com/100-1/
FAQ
What is CVE-2005-0866?
CVE-2005-0866 is a vulnerability with a CVSS score of 2.1 (LOW). cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
How severe is CVE-2005-0866?
CVE-2005-0866 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-0866?
Check the references section above for vendor advisories and patch information. Affected products include: Cdrtools Cdrecord.