CVE-2002-1633

Published: Dec 31, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.

Affected (1)

Products: Qnx: Qnx Rtos

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qnx Qnx Rtos	Version 4.25

References (8)

http://www.kb.cert.org/vuls/id/879386

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/276553

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/5000

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/9341

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/879386

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/276553

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/5000

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/9341

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.