PT-2005-4814 · Blackberry · Qnx

Published 2005-12-08 · Updated 2018-10-19 · CVE-2005-4082

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QNX version 4.25

Description The dhcp.client program is setuid, which allows local users to modify the NIC configuration and conduct other attacks.

Recommendations For QNX version 4.25, consider removing the setuid bit from the dhcp.client program to prevent local users from modifying the NIC configuration and conducting other attacks.

Fix

Related Identifiers

CVE-2005-4082

Affected Products

Qnx

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-4082 · Security Note
• http://secunia.com/advisories/17870 · Note
• http://securityfocus.com/archive/1/418513/100/0/threaded · Note
• http://securityfocus.com/bid/15785 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23543 · Note