CVE-2002-1239: High severity QNX RTOS vulnerability
Published Nov 12, 2002
·Updated
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.
Affected Software
1 affected component
QNX RTOS=6.2.0
Remediation
Patch Available
Event History
Nov 12, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1239?
CVE-2002-1239 is considered a high severity vulnerability due to the potential for local privilege escalation.
2
How do I fix CVE-2002-1239?
To fix CVE-2002-1239, users should ensure the PATH environment variable does not include directories writable by untrusted users or set appropriate permissions on the cp executable.
3
Who is affected by CVE-2002-1239?
CVE-2002-1239 affects users of QNX Neutrino RTOS version 6.2.0.
4
What type of vulnerability is CVE-2002-1239?
CVE-2002-1239 is a local privilege escalation vulnerability.
5
Can CVE-2002-1239 be exploited remotely?
CVE-2002-1239 cannot be exploited remotely, as it requires local access to the system.