GCVE - cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*

part: a version: 6.2.0 update: *

Vendor	Qnx (`573ef8a6-c4fa-5149-9485-c446617dc37f`)
Product	Rtos (`ae7d982f-2aec-5821-9f45-2f91938edce4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0621`	vulnerable	2026-06-08 04:48:54.693894	Details available Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands. Published: 2006-02-09T02:00:00.000Z Updated: 2024-08-07T16:41:28.976Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/24554 http://www.vupen.com/english/advisories/2006/0474 http://secunia.com/advisories/18750 http://www.osvdb.org/22961 http://www.osvdb.org/22959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1683`	not_vulnerable	2026-06-08 04:47:54.777159	Details available A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap. Published: 2005-02-20T05:00:00.000Z Updated: 2024-08-08T01:00:36.923Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17345 http://marc.info/?l=bugtraq&m=109511737504357&w=2 http://www.securityfocus.com/bid/11165	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1391`	vulnerable	2026-06-08 04:47:53.951289	Details available Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program. Published: 2005-02-06T05:00:00.000Z Updated: 2024-08-08T00:46:12.550Z Open on db.gcve.eu Reference links http://www.rfdslabs.com.br/qnx-advs-01-2004.txt http://www.securityfocus.com/bid/11105 http://www.osvdb.org/9661 https://exchange.xforce.ibmcloud.com/vulnerabilities/17284 http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1390`	vulnerable	2026-06-08 04:47:53.948505	Details available Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags. Published: 2005-02-06T05:00:00.000Z Updated: 2024-08-08T00:46:12.551Z Open on db.gcve.eu Reference links http://www.rfdslabs.com.br/qnx-advs-01-2004.txt http://www.securityfocus.com/bid/11104 http://www.kb.cert.org/vuls/id/961686 http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17280	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1239`	vulnerable	2026-06-08 04:46:23.248787	Details available QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:19:27.723Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html http://marc.info/?l=bugtraq&m=103679043232178&w=2 http://www.securityfocus.com/bid/6146 http://www.idefense.com/advisory/11.08.02b.txt http://www.iss.net/security_center/static/10564.php	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.