Mandrake Linux Security Update Advisory – The cdrecord program, which is suid root, fails to drop euid=0 when it exec()s a program specified by the user through the RSH environment variable. This can be abused by a local attacker to obtain root privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34303/MDKSA-2004%3A091.txt
Source: https://packetstormsecurity.com/files/34303/MDKSA-2004-091.txt.html