Vulnerability in Qnx Rtos

CVE-2004-1390

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.

EPSS: 0.073 (93.7th percentile) — read the EPSS interpretation.

Affected products

Qnx Rtos — versions 2.4, 4.25, 6.1.0
Qnx Rtp — versions 6.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (vdb-entry, x_refsource_XF)