GCVE - cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*

part: a version: 4.25 update: *

Vendor	Qnx (`573ef8a6-c4fa-5149-9485-c446617dc37f`)
Product	Rtos (`ae7d982f-2aec-5821-9f45-2f91938edce4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-1390`	vulnerable	2026-06-08 04:47:53.947025	Details available Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags. Published: 2005-02-06T05:00:00.000Z Updated: 2024-08-08T00:46:12.551Z Open on db.gcve.eu Reference links http://www.rfdslabs.com.br/qnx-advs-01-2004.txt http://www.securityfocus.com/bid/11104 http://www.kb.cert.org/vuls/id/961686 http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17280	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2120`	vulnerable	2026-06-08 04:47:19.139057	Details available Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10. Published: 2005-08-05T04:00:00.000Z Updated: 2024-09-17T04:20:21.867Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/4906 http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html http://www.iss.net/security_center/static/9236.php http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html http://www.securityfocus.com/bid/4905	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2042`	vulnerable	2026-06-08 04:47:18.962709	Details available ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes. Published: 2005-07-14T04:00:00.000Z Updated: 2024-09-16T19:51:58.953Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/9260.php http://online.securityfocus.com/archive/1/275218 http://www.securityfocus.com/bid/4919	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2040`	vulnerable	2026-06-08 04:47:18.962111	Details available The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program. Published: 2005-07-14T04:00:00.000Z Updated: 2024-09-17T02:57:59.324Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/4916 http://www.securityfocus.com/bid/4915 http://online.securityfocus.com/archive/1/275218 http://www.iss.net/security_center/static/9257.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2039`	vulnerable	2026-06-08 04:47:18.961715	Details available /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal. Published: 2005-07-14T04:00:00.000Z Updated: 2024-08-08T03:51:17.542Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/9256.php http://www.securityfocus.com/bid/4914 http://marc.info/?l=bugtraq&m=102312549511726&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.