PT-2002-2840 · Blackberry · Qnx Rtos

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2120

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: QNX RTOS version 4.25

Description: The issue concerns multiple buffer overflows that may allow attackers to execute arbitrary code. This can be achieved by providing long filename arguments to certain functions, specifically (1) Watcom or (2) int10.

Recommendations: For QNX RTOS version 4.25, consider restricting the length of filename arguments passed to Watcom and int10 functions as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-2120

Affected Products

Qnx Rtos

References · 7

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2120 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html · Note
• http://iss.net/security_center/static/9236.php · Note
• http://securityfocus.com/bid/4906 · Note
• http://iss.net/security_center/static/9235.php · Note
• http://securityfocus.com/bid/4905 · Note