CVE-2002-0137: Andreas Mueller Cdrdao

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Affected products

• Andreas Mueller Cdrdao: version 1.1.4 only; version 1.1.5 only

Published 2002-03-25. Last modified 2026-06-16.