CVEvulnerability
CVE-2002-1633
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
Affected configurations
• qnx qnx rtos 4.25
References
- http://www.kb.cert.org/vuls/id/879386 US Government Resource
- http://www.securityfocus.com/archive/1/276553 Exploit
- http://www.securityfocus.com/bid/5000 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9341 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/879386 US Government Resource
- http://www.securityfocus.com/archive/1/276553 Exploit
- http://www.securityfocus.com/bid/5000 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9341 exchange.xforce.ibmcloud.com