Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
References
Link | Resource |
---|---|
http://www.securityfocus.com/archive/1/276553 | Exploit |
http://www.kb.cert.org/vuls/id/879386 | US Government Resource |
http://www.securityfocus.com/bid/5000 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/9341 |
Configurations
Information
Published : 2002-12-30 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2002-1633
Mitre link : CVE-2002-1633
JSON object : View
CWE
Products Affected
qnx
- qnx_rtos