Vulnerability in Qnx Rtos

CVE-2002-1633

Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.

EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.

Affected products

Qnx Qnx_rtos — versions 4.25
N/a — versions n/a

References

cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)