Cdrtools is a niche, legacy CD/DVD recording utility suite centered on the cdrecord tool, which remains embedded in some older build and archival systems despite its narrow modern deployment footprint. The limited reported vulnerabilities reflect the tooling's focused scope and long history, with observed weaknesses categorized as miscellaneous issues; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cdrtools over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0806HIGH cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, wh | Dec 31, 2004 | 7.2 | 33 | NO | YES |
CVE-2003-0289HIGH Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter. | Jun 16, 2003 | 7.2 | 29 | NO | YES |
CVE-2003-0655HIGH rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modif | Aug 27, 2003 | 7.2 | 27 | NO | YES |
cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files. | May 2, 2005 | 2.1 | 12 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cdrtools.
Media articles that mention a CVE ID that affects a product developed by Cdrtools — matched by CVE ID, not by vendor name.