CVE-2002-1633: Buffer Overflow

Published Dec 31, 2002

Updated

Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.

Affected Software

1 affected component

QNX Qnx Rtos=4.25

Event History

Dec 31, 2002

CVE Published

05:00 AM

Mar 26, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1633?

CVE-2002-1633 is classified as a high severity vulnerability due to the potential for arbitrary code execution.

How do I fix CVE-2002-1633?

To address CVE-2002-1633, upgrading to a newer version of QNX that does not have this vulnerability is recommended.

Who is affected by CVE-2002-1633?

CVE-2002-1633 affects users of QNX RTOS version 4.25.

What type of vulnerability is CVE-2002-1633?

CVE-2002-1633 is a buffer overflow vulnerability that can be exploited via long command line arguments.

Can CVE-2002-1633 be exploited remotely?

CVE-2002-1633 primarily allows for local exploitation as it requires access to the command line.