PT-2002-2840 · Blackberry · Qnx Rtos

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2120

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: QNX RTOS version 4.25

Description: The issue concerns multiple buffer overflows that may allow attackers to execute arbitrary code. This can be achieved by providing long filename arguments to certain functions, specifically (1) Watcom or (2) int10.

Recommendations: For QNX RTOS version 4.25, consider restricting the length of filename arguments passed to Watcom and int10 functions as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-2120

Produtos afetados

Qnx Rtos

Referências · 7

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html · Nota
• http://iss.net/security_center/static/9236.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2120 · Nota de Segurança
• http://securityfocus.com/bid/4906 · Nota
• http://iss.net/security_center/static/9235.php · Nota
• http://securityfocus.com/bid/4905 · Nota