Vulnerability in Qnx Rtos

CVE-2002-2039

/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.

EPSS: 0.008 (54.2th percentile) — read the EPSS interpretation.

Affected products

Qnx Rtos — versions 4.25, 6.1.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)