PT-2005-4814 · Blackberry · Qnx

Publicado 2005-12-08 · Atualizado 2018-10-19 · CVE-2005-4082

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QNX version 4.25

Description The dhcp.client program is setuid, which allows local users to modify the NIC configuration and conduct other attacks.

Recommendations For QNX version 4.25, consider removing the setuid bit from the dhcp.client program to prevent local users from modifying the NIC configuration and conducting other attacks.

Correção

Identificadores relacionados

CVE-2005-4082

Produtos afetados

Qnx

Referências · 5

• http://secunia.com/advisories/17870 · Nota
• http://securityfocus.com/archive/1/418513/100/0/threaded · Nota
• http://securityfocus.com/bid/15785 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4082 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23543 · Nota