CVE-2014-2534 /sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the roo...
MediumCVSS 4.9
EPSS 0.95%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the root password hash in /etc/shadow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry qnx neutrino rtos | = 6.4.1 | No fix listed |
| blackberry qnx neutrino rtos | = 6.5.0 | No fix listed |
| blackberry qnx neutrino rtos | = 6.5.0-sp1 | No fix listed |
References
- 20140311 Medium severity flaw in BlackBerry QNX Neutrino RTOS mailing-list
- 20140313 Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS mailing-list
- 20140313 Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS mailing-list
- 20140312 Medium severity flaw in BlackBerry QNX Neutrino RTOS mailing-list
- 32156 exploit