high7.2Public exploit code
CVE-2004-1681
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gai…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QNX Photon pkg-installer - '-s' Overflow2004-09-13 · dos · unix · Verified
- QNX Photon input-cfg - '-s' Overflow2004-09-13 · dos · unix · Verified
- QNX Photon phlocale - '-s' Overflow2004-09-13 · dos · unix · Verified
- QNX Photon phrelay-cfg - '-s' Overflow2004-09-13 · dos · unix · Verified
Impact
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnx | Photon Microgui | All versions |
| Qnx | Rtp | Version 6.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109510393407597&w=2
- http://www.rfdslabs.com.br/qnx-advs-03-2004.txt
- http://www.securityfocus.com/bid/11164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17339
- http://marc.info/?l=bugtraq&m=109510393407597&w=2
- http://www.rfdslabs.com.br/qnx-advs-03-2004.txt
- http://www.securityfocus.com/bid/11164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17339