PT-2002-2209 · Qnx · Qnx Neutrino Rtos

Publicado 2002-11-12 · Atualizado 2016-10-18 · CVE-2002-1239

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: QNX Neutrino RTOS version 6.2.0

Description: The issue allows local users to gain privileges by modifying the PATH environment variable to point to a malicious cp program, which is then executed by the system while operating at raised privileges.

Recommendations: For QNX Neutrino RTOS version 6.2.0, consider restricting access to the PATH environment variable to prevent unauthorized modifications, and ensure that the system's executable search path is properly configured to prevent execution of malicious programs.

Exploit

Correção

Identificadores relacionados

CVE-2002-1239

Produtos afetados

Qnx Neutrino Rtos

Referências · 7

• 🔥 http://idefense.com/advisory/11.08.02b.txt · Exploit
• 🔥 https://exploit-db.com/exploits/22002 · Exploit
• http://iss.net/security_center/static/10564.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1239 · Nota de Segurança
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html · Nota
• http://securityfocus.com/bid/6146 · Nota
• http://marc.info/?l=bugtraq&m=103679043232178&w=2 · Nota