CVE-2002-2039 /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.
LowCVSS 2.1
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtos | = 4.25 | No fix listed |
| qnx rtos | = 6.1.0 | No fix listed |
References
- 20020603 QNX mailing-list
- qnx-rtos-su-core-dump(9256) vdb-entry
- 4914 exploit vdb-entry