Advisories

Mandriva Advisories

Package name cdrecord Date May 15th, 2003 Advisory ID MDKSA-2003:058 Affected versions 8.2, 9.0, 9.1, CS2.1 Synopsis Updated cdrecord packages fix local root compromise

Problem Description

A vulnerability in cdrecord was discovered that can be used to obtain
root access because Mandrake Linux ships with the cdrecord binary
suid root and sgid cdwriter.

Updated packages are provided that fix this vulnerability. You may
also elect to remove the suid and sgid bits from cdrecord manually,
which can be done by executing, as root:

chmod ug-s /usr/bin/cdrecord

This is not required to protect yourself from this particular
vulnerability, however.

Updated Packages

Mandrakelinux 8.2

 74684e91236d5d43bee1e734dc83a254  8.2/RPMS/cdrecord-1.11-0.a31.1.2mdk.i586.rpm
78249bc93411b90a333db8a3522547b2  8.2/RPMS/cdrecord-cdda2wav-1.11-0.a31.1.2mdk.i586.rpm
f1b109133a6ec537796f219c7cff4a26  8.2/RPMS/cdrecord-devel-1.11-0.a31.1.2mdk.i586.rpm
8260d705d732d5fc5a2cd242c74ae34c  8.2/RPMS/cdrecord-dvdhack-1.11-0.a31.1.2mdk.i586.rpm
4718ef8038632687a9d457a04860bcf5  8.2/RPMS/mkisofs-1.15-0.a31.1.2mdk.i586.rpm
b27b3e85bc49ce32430a517e78c90839  8.2/SRPMS/cdrecord-1.11-0.a31.1.2mdk.src.rpm

Mandrakelinux 8.2/PPC

 649fe380e3aeaaadd1a8c6e5e522ec4a  ppc/8.2/RPMS/cdrecord-1.11-0.a31.1.2mdk.ppc.rpm
7ac1ddfaa771a76d84e3374f2a573e7e  ppc/8.2/RPMS/cdrecord-cdda2wav-1.11-0.a31.1.2mdk.ppc.rpm
65c2ff6b701c6524cd433d897bd38035  ppc/8.2/RPMS/cdrecord-devel-1.11-0.a31.1.2mdk.ppc.rpm
8ee3fe967c3bac949a096957097e26fd  ppc/8.2/RPMS/cdrecord-dvdhack-1.11-0.a31.1.2mdk.ppc.rpm
ce823110d1e1bbc43ad1bf83819b22aa  ppc/8.2/RPMS/mkisofs-1.15-0.a31.1.2mdk.ppc.rpm
16df8e5b09fe919fc838f5a30acb28d9  ppc/8.2/SRPMS/cdrecord-1.11-0.a31.1.1mdk.src.rpm
b27b3e85bc49ce32430a517e78c90839  ppc/8.2/SRPMS/cdrecord-1.11-0.a31.1.2mdk.src.rpm

Mandrakelinux 9.0

 f9acb79ec47f9210fec2b237921b6538  9.0/RPMS/cdrecord-1.11-0.a32.2mdk.i586.rpm
cadc1c431bcf9ff9a0cad7527f7d6133  9.0/RPMS/cdrecord-cdda2wav-1.11-0.a32.2mdk.i586.rpm
b0e05c3c76e882456cb97cdde0c70477  9.0/RPMS/cdrecord-devel-1.11-0.a32.2mdk.i586.rpm
30f363592408797a54e34b00325a5f46  9.0/RPMS/cdrecord-dvdhack-1.11-0.a32.2mdk.i586.rpm
4804c96762ecb47f82eb6b86297d43d4  9.0/RPMS/mkisofs-1.15-0.a32.2mdk.i586.rpm
59521b1b94cb3a3a7b893887557a7cbd  9.0/SRPMS/cdrecord-1.11-0.a32.2mdk.src.rpm

Mandrakelinux 9.1

 d7ebf3954e41ad0a7eede760b191525f  9.1/RPMS/cdrecord-2.0-2.1mdk.i586.rpm
240e95f9818946a87032ac344e113da3  9.1/RPMS/cdrecord-cdda2wav-2.0-2.1mdk.i586.rpm
ba5db2f8f00cb339ea2791806ccb6383  9.1/RPMS/cdrecord-devel-2.0-2.1mdk.i586.rpm
fc6d6893df2f978a89670fe7e2b9b148  9.1/RPMS/cdrecord-dvdhack-2.0-2.1mdk.i586.rpm
99d6e49d21fa3edd3290504339bdecb1  9.1/RPMS/mkisofs-2.0-2.1mdk.i586.rpm
2c4381aa8545c5e382a25ef74a2f6dfb  9.1/SRPMS/cdrecord-2.0-2.1mdk.src.rpm

Mandrakelinux 9.1/PPC

 f77c5b9c1243bf14103d4b4675b22fb6  ppc/9.1/RPMS/cdrecord-2.0-2.1mdk.ppc.rpm
eafc927f0f5fa2bd72aee67173cfeafb  ppc/9.1/RPMS/cdrecord-cdda2wav-2.0-2.1mdk.ppc.rpm
2415cc3bb4ac83d119a5774eb8a7f803  ppc/9.1/RPMS/cdrecord-devel-2.0-2.1mdk.ppc.rpm
e7a1944b94be4ab0c4a916f5c8baa14a  ppc/9.1/RPMS/cdrecord-dvdhack-2.0-2.1mdk.ppc.rpm
fc94a96533f1e8bb7a11f152697a3060  ppc/9.1/RPMS/mkisofs-2.0-2.1mdk.ppc.rpm
2c4381aa8545c5e382a25ef74a2f6dfb  ppc/9.1/SRPMS/cdrecord-2.0-2.1mdk.src.rpm

Corporate Server 2.1

 f9acb79ec47f9210fec2b237921b6538  corporate/2.1/RPMS/cdrecord-1.11-0.a32.2mdk.i586.rpm
cadc1c431bcf9ff9a0cad7527f7d6133  corporate/2.1/RPMS/cdrecord-cdda2wav-1.11-0.a32.2mdk.i586.rpm
b0e05c3c76e882456cb97cdde0c70477  corporate/2.1/RPMS/cdrecord-devel-1.11-0.a32.2mdk.i586.rpm
30f363592408797a54e34b00325a5f46  corporate/2.1/RPMS/cdrecord-dvdhack-1.11-0.a32.2mdk.i586.rpm
4804c96762ecb47f82eb6b86297d43d4  corporate/2.1/RPMS/mkisofs-1.15-0.a32.2mdk.i586.rpm
59521b1b94cb3a3a7b893887557a7cbd  corporate/2.1/SRPMS/cdrecord-1.11-0.a32.2mdk.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0289
http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2

Upgrade

To upgrade automatically, use MandrivaUpdate.

Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

                rpm --checksig package.rpm
                

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.