Andreas Mueller Cdrdao — known CVE vulnerabilities

Every CVE whose affected-product data names Andreas Mueller Cdrdao, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2002-0137 — CVSS 7.2 (high): CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
• CVE-2002-0138 — CVSS 2.1 (low): CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.