Vulnerabilities > QNX > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-02-09 | CVE-2006-0622 | Resource Management Errors vulnerability in QNX Rtos 6.3.0 QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb. | 4.9 |
| 2006-02-09 | CVE-2006-0620 | Local Privilege Escalation and Denial Of Service vulnerability in QNX Rtos 6.2.1/6.2.1A/6.2.1B Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. | 6.2 |
| 2006-02-09 | CVE-2006-0619 | Buffer Errors vulnerability in QNX Rtos 6.3.0 Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library. | 4.6 |
| 2006-02-09 | CVE-2006-0618 | Local Privilege Escalation and Denial Of Service vulnerability in QNX Neutrino Rtos 6.3.0 Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name). | 4.6 |
| 2005-12-08 | CVE-2005-4082 | Local DHCP.Client vulnerability in QNX 4.25 The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks. | 4.6 |
| 2005-11-30 | CVE-2005-3928 | Local Buffer Overflow vulnerability in QNX Rtos 6.2.1/6.3.0 Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument. | 4.6 |
| 2004-12-31 | CVE-2004-1391 | Local Command Execution vulnerability in QNX Rtos and RTP Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program. | 4.6 |
| 2002-12-31 | CVE-2002-2407 | Permissions, Privileges, and Access Controls vulnerability in QNX Rtos 6.2/6.2A Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed. | 6.9 |
| 2002-12-31 | CVE-2002-2120 | Buffer Overflow vulnerability in QNX Rtos 4.25 Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10. | 4.6 |
| 2002-12-31 | CVE-2002-1633 | Local Buffer Overflow vulnerability in QNX Rtos 4.25 Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip. | 4.6 |