CVE-2002-0793

Description

Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected products

BlackBerry / qnx_neutrino_real-time_operating_system4.25 – 4.25

References

MISChttp://www.securityfocus.com/bid/4901
MISChttp://www.securityfocus.com/bid/4902
MISChttp://www.securityfocus.com/bid/4904
MISChttp://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html
MISChttp://www.iss.net/security_center/static/9231.php
MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/9234
MISChttp://www.securityfocus.com/bid/4903
MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/9232
MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/9233