CVE-2004-0806

HIGH · CVSS 7.2 EPSS 1.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2004-0806

Severity

HIGH

CVSS

7.2

EPSS

1.73%

Original Filing — NVD Description

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.