CVE-2004-1391 Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious m...
MediumCVSS 4.6
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtos | = 6.1.0 | No fix listed |
| qnx rtos | = 6.1.0a | No fix listed |
| qnx rtos | = 6.2.0 | No fix listed |
| qnx rtos | = 6.2.1a | No fix listed |
| qnx rtos | = 6.2.1b | No fix listed |
| qnx rtos | = 6.3.0 | No fix listed |
| qnx rtp | = 6.1 | No fix listed |
References
- 20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities exploit mailing-list
- VU#577566 third-party-advisory us-government-resource
- 9661 vdb-entry
- www.rfdslabs.com.br
- 11105 exploit vdb-entry
- qnx-rtp-mount-command-execute(17284) vdb-entry