CVEvulnerability
CVE-2014-2534
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the root password hash in /etc/shadow.
Affected configurations
• blackberry qnx neutrino rtos 6.4.1
• blackberry qnx neutrino rtos 6.5.0
Related
Weakness · not in database (1)
References
- http://seclists.org/bugtraq/2014/Mar/66 seclists.org
- http://seclists.org/bugtraq/2014/Mar/88 seclists.org
- http://seclists.org/fulldisclosure/2014/Mar/124 seclists.org
- http://seclists.org/fulldisclosure/2014/Mar/98 seclists.org
- http://www.exploit-db.com/exploits/32156/ Exploit
- http://seclists.org/bugtraq/2014/Mar/66 seclists.org
- http://seclists.org/bugtraq/2014/Mar/88 seclists.org
- http://seclists.org/fulldisclosure/2014/Mar/124 seclists.org
- http://seclists.org/fulldisclosure/2014/Mar/98 seclists.org
- http://www.exploit-db.com/exploits/32156/ Exploit