rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges.
| Software | From | Fixed in |
|---|---|---|
| cdrtools / cdrtools | 2.0 | 2.0.x |
| cdrtools / cdrtools | 2.0.3 | 2.0.3.x |