low2.1Public exploit code
CVE-2002-2039
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QNX RTOS 4.25/6.1 - su Password Hash Disclosure2002-06-03 · local · linux · Verified
Impact
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnx | Rtos | Versions 4.25, 6.1.0 |