rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cdrtools | Cdrtools | 2.0 (including) | 2.0 (including) |
Cdrtools | Cdrtools | 2.0.3 (including) | 2.0.3 (including) |