CVE-2004-1390

Published: Dec 31, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.

Affected (6)

Products: Qnx: Rtos, Rtp

2 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Qnx Rtos	Version 2.4
Qnx Rtos	Version 4.25
Qnx Rtos	Version 6.1.0
Qnx Rtos	Version 6.2.0
Qnx Rtos	Version 6.2.0a
Qnx Rtp	Version 6.1

References (10)

http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/961686

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.rfdslabs.com.br/qnx-advs-01-2004.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/11104

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17280

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/961686

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.rfdslabs.com.br/qnx-advs-01-2004.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11104

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17280

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.