Beveiligingsadvies

CVE-2002-2040

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-07-14 04:00:00

Laatst bijgewerkt 2024-09-17 02:57:59

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program.

← Alle CVE's bekijken Bekijk op cve.org ↗