Vulnerabilities > QNX > Rtos > 6.1.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-08-30 | CVE-2005-2725 | Local Arbitrary File Disclosure vulnerability in QNX RTOS InputTrap The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files. | 2.1 |
| 2004-12-31 | CVE-2004-1391 | Local Command Execution vulnerability in QNX Rtos and RTP Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program. | 4.6 |
| 2004-12-31 | CVE-2004-1390 | Local Buffer Overrun vulnerability in QNX Rtos and RTP Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags. | 10.0 |
| 2002-12-31 | CVE-2002-2042 | Unspecified vulnerability in QNX Rtos 4.25/6.1.0 ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes. | 7.2 |
| 2002-12-31 | CVE-2002-2041 | Buffer Overflow vulnerability in QNX Rtos 6.1.0 Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment variable in phlocale or (2) a long -u option to pkg-installer. | 7.2 |
| 2002-12-31 | CVE-2002-2040 | Unspecified vulnerability in QNX Rtos 4.25/6.1.0 The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program. | 7.2 |
| 2002-12-31 | CVE-2002-2039 | Unspecified vulnerability in QNX Rtos 4.25/6.1.0 /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal. | 2.1 |
| 2002-12-31 | CVE-2002-1983 | Local Denial of Service vulnerability in QNX Rtos 6.1.0 The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick. | 2.1 |