CVE-2004-1391

Published: Dec 31, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.

Affected (7)

Products: Qnx: Rtos, Rtp

Qnx

2 products

Rtos

Rtp

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Qnx Rtos	Version 6.1.0
Qnx Rtos	Version 6.1.0a
Qnx Rtos	Version 6.2.0
Qnx Rtos	Version 6.2.1a
Qnx Rtos	Version 6.2.1b
Qnx Rtos	Version 6.3.0
Qnx Rtp	Version 6.1

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/577566

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/9661

Source: cve@mitre.org

http://www.rfdslabs.com.br/qnx-advs-01-2004.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/11105

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17284

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html