Vulnerability in Qnx Rtos

CVE-2004-1391

Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.

EPSS: 0.006 (43.4th percentile) — read the EPSS interpretation.

Affected products

Qnx Rtos — versions 6.1.0, 6.1.0a, 6.2.0
Qnx Rtp — versions 6.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)