漏洞信息详情
CDRTools RSH环境变量权限提升漏洞
- CNNVD编号：CNNVD-200412-947
- 危害等级： 高危
![图片[1]-CDRTools RSH环境变量权限提升漏洞-一一网](https://www.proyy.com/skycj/data/images/2021-05-26/bbdd3e8868c10d22861b2275d65f4500.png)
- CVE编号：
CVE-2004-0806
- 漏洞类型：
访问验证错误
- 发布时间：
2004-08-31
- 威胁类型：
本地
- 更新时间：
2005-10-20
- 厂 商：
cdrtools - 漏洞来源：
newbug Tseng※ newb… -
漏洞简介
CDRTools是一款基于Linux的刻录工具。
CDRecord对RSH环境变量处理不正确，本地攻击者可以利用这个漏洞进行特权提升攻击。
由于CDRecord执行RSH环境变量指定的应用程序时不正确的实现安全控制，攻击者可以利用环境变量获得超级用户特权。
漏洞公告
厂商补丁：
MandrakeSoft
————
MandrakeSoft已经为此发布了一个安全公告(MDKSA-2004:091)以及相应补丁:
MDKSA-2004:091：Updated cdrecord packages fix local root vulnerability
链接：http://www.linux-mandrake.com/en/security/2004/2004-091.php” target=”_blank”>
http://www.linux-mandrake.com/en/security/2004/2004-091.php
补丁下载：
Updated Packages:
Mandrakelinux 10.0:
Mandrakelinux 10.0/AMD64:
Mandrakelinux 9.2:
Mandrakelinux 9.2/AMD64:
上述升级软件还可以在下列地址中的任意一个镜像ftp服务器上下载：
http://www.mandrakesecure.net/en/ftp.php” target=”_blank”>
http://www.mandrakesecure.net/en/ftp.php
RedHat
——
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Fedora Upgrade cdrecord-2.01-0.a19.2.FC1.1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrecord-devel-2.01-0.a19.2.FC1.1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade mkisofs-2.01-0.a19.2.FC1.1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdda2wav-2.01-0.a19.2.FC1.1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrtools-debuginfo-2.01-0.a19.2.FC1.1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrecord-2.01-0.a19.2.FC1.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrecord-devel-2.01-0.a19.2.FC1.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade mkisofs-2.01-0.a19.2.FC1.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdda2wav-2.01-0.a19.2.FC1.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrtools-debuginfo-2.01-0.a19.2.FC1.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
Fedora Upgrade cdrecord-2.01-0.a27.4.FC2.3.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/” target=”_blank”>
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
Fedora Upgrade cdrecord-devel-2.01-0.a27.4.FC2.3.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/” target=”_blank”>
http://download.fedora.r
参考网址
来源:US-CERT Vulnerability Note: VU#700326
名称: VU#700326
链接:http://www.kb.cert.org/vuls/id/700326
来源: XF
名称: cdrecord-rsh-gain-privileges(17303)
链接:http://xforce.iss.net/xforce/xfdb/17303
来源: BID
名称: 11075
链接:http://www.securityfocus.org/bid/11075
来源: FEDORA
名称: FLSA:2058
链接:https://bugzilla.fedora.us/show_bug.cgi?id=2058
来源: BUGTRAQ
名称: 20040910 CAU-EX-2004-0002: cdrecord-suidshell.sh
链接:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html
来源: SECTRACK
名称: 1011091
链接:http://securitytracker.com/id?1011091
来源: SECUNIA
名称: 12481
链接:http://secunia.com/advisories/12481/
来源: BUGTRAQ
名称: 20040909 Bugtraq: cdrecord local root exploit
链接:http://seclists.org/lists/bugtraq/2004/Sep/0097.html
来源: OVAL
名称: oval:org.mitre.oval:def:9805
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9805
来源: MANDRAKE
名称: MDKSA-2004:091
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2004:091
来源: SECUNIA
名称: 19532
链接:http://secunia.com/advisories/19532
来源: SGI
名称: 20060401-01-U
链接:ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U
来源：NSFOCUS
名称：6939
链接：http://www.nsfocus.net/vulndb/6939
![[桜井宁宁]COS和泉纱雾超可爱写真福利集-一一网](https://www.proyy.com/skycj/data/images/2020-12-13/4d3cf227a85d7e79f5d6b4efb6bde3e8.jpg)
![[桜井宁宁] 爆乳奶牛少女cos写真-一一网](https://www.proyy.com/skycj/data/images/2020-12-13/d40483e126fcf567894e89c65eaca655.jpg)
