CVE-2002-0137

CVE-2002-0137 affects CDRDAO 1.1.4 and 1.1.5, where a local user can exploit a symlink to overwrite the user’s ~/.cdrdao configuration file and potentially escalate. The Mandrake advisory (MDKSA-2005:089) notes a second vulnerability (read arbitrary files) and confirms that the packages have been...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 are affected by CVE-2002-0138: local users can read arbitrary files via the show-data command. The issue is documented in Mandrake advisory MDKSA-2005:089, which notes a patch is available for the affected packages. Exploitation details are not provided in the supplied docu...