CVE-2002-1633 Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv,....
MediumCVSS 4.6
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtos | = 4.25 | No fix listed |
References
- VU#879386 third-party-advisory us-government-resource
- 20020612 madcr: QnX 4.25 - multiples bof in suid/no suid files exploit mailing-list
- 5000 vdb-entry
- qnx-rtos-bin-bo(9341) vdb-entry