cdda2cdr_bof.txt

Greetings, There is a buffer overflow vulnerability in cdda2cdr distributed with at least package cdwtools-0.93-78. This program is sgid disk by default and thus any malicious user who gains disk privs will have r/w access to your entire hard drives in the form of /dev/hd. This is obviously a qui...