• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

CDRTools RSH Environment Variable Privilege Escalation Vulnerability

Solution:


Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com

Please see the referenced advisories for more information and fixes.


CDRTools CDRTools 2.0.1

• Fedora cdda2wav-2.01-0.a19.2.FC1.1.i386.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdda2wav-2.01-0.a19.2.FC1.1.x86_64.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdda2wav-2.01-0.a27.4.FC2.3.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdda2wav-2.01-0.a27.4.FC2.3.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrecord-2.01-0.a19.2.FC1.1.i386.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrecord-2.01-0.a19.2.FC1.1.x86_64.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrecord-2.01-0.a27.4.FC2.3.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrecord-2.01-0.a27.4.FC2.3.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrecord-devel-2.01-0.a19.2.FC1.1.i386.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrecord-devel-2.01-0.a19.2.FC1.1.x86_64.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrecord-devel-2.01-0.a27.4.FC2.3.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrecord-devel-2.01-0.a27.4.FC2.3.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrtools-debuginfo-2.01-0.a19.2.FC1.1.i386.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrtools-debuginfo-2.01-0.a19.2.FC1.1.x86_64.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora cdrtools-debuginfo-2.01-0.a27.4.FC2.3.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora cdrtools-debuginfo-2.01-0.a27.4.FC2.3.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mkisofs-2.01-0.a19.2.FC1.1.i386.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora mkisofs-2.01-0.a19.2.FC1.1.x86_64.rpm
  RedHat Fedora Core 1
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/


• Fedora mkisofs-2.01-0.a27.4.FC2.3.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mkisofs-2.01-0.a27.4.FC2.3.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Mandrake cdrecord-2.01-0.a18.2.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-2.01-0.a18.2.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-2.01-0.a28.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-2.01-0.a28.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-cdda2wav-2.01-0.a18.2.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-cdda2wav-2.01-0.a18.2.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-cdda2wav-2.01-0.a28.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-cdda2wav-2.01-0.a28.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-devel-2.01-0.a18.2.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-devel-2.01-0.a18.2.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-devel-2.01-0.a28.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cdrecord-devel-2.01-0.a28.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake mkisofs-2.01-0.a18.2.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake mkisofs-2.01-0.a18.2.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake mkisofs-2.01-0.a28.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php

SCO Unixware 7.1.4

• SCO SCOSA-2005.20
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.20