CVE-2004-1391

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html
Exploit
http://www.kb.cert.org/vuls/id/577566
Third Party Advisory
US Government Resource
http://www.osvdb.org/9661
http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
http://www.securityfocus.com/bid/11105
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17284
http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html
Exploit
http://www.kb.cert.org/vuls/id/577566
Third Party Advisory
US Government Resource
http://www.osvdb.org/9661
http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
http://www.securityfocus.com/bid/11105
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17284

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.1.0a:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.2.1a:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.2.1b:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00191

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9pxm-c827-5fjf

github

больше 3 лет назад