CVE-2014-2533

Published: Mar 18, 2014Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument.

Affected (3)

Products: Blackberry: Qnx Neutrino Rtos

Blackberry

1 product

Qnx Neutrino Rtos

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Blackberry Qnx Neutrino Rtos	Version 6.4.1
Blackberry Qnx Neutrino Rtos	Version 6.5.0
Blackberry Qnx Neutrino Rtos	Version 6.5.0 sp1

Related CWEs

CWE-264

References (12)

http://seclists.org/bugtraq/2014/Mar/66

Source: cve@mitre.org

http://seclists.org/bugtraq/2014/Mar/88

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Mar/124

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Mar/98

Source: cve@mitre.org

http://www.exploit-db.com/exploits/32153/

Source: cve@mitre.org

Exploit

https://www.exploit-db.com/exploits/45575/

Source: cve@mitre.org

http://seclists.org/bugtraq/2014/Mar/66