PT-2002-2209 · Qnx · Qnx Neutrino Rtos

Published 2002-11-12 · Updated 2016-10-18 · CVE-2002-1239

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: QNX Neutrino RTOS version 6.2.0

Description: The issue allows local users to gain privileges by modifying the PATH environment variable to point to a malicious cp program, which is then executed by the system while operating at raised privileges.

Recommendations: For QNX Neutrino RTOS version 6.2.0, consider restricting access to the PATH environment variable to prevent unauthorized modifications, and ensure that the system's executable search path is properly configured to prevent execution of malicious programs.

Exploit

Fix

Related Identifiers

CVE-2002-1239

Affected Products

Qnx Neutrino Rtos

References · 7

• 🔥 http://idefense.com/advisory/11.08.02b.txt · Exploit
• 🔥 https://exploit-db.com/exploits/22002 · Exploit
• http://iss.net/security_center/static/10564.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1239 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html · Note
• http://securityfocus.com/bid/6146 · Note
• http://marc.info/?l=bugtraq&m=103679043232178&w=2 · Note