CVE-2002-2039: Low severity qnx rtos vulnerability
Published Dec 31, 2002
·Updated
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.
Affected Software
2 affected components
QNX RTOS=4.25
QNX RTOS=6.1.0
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Jul 14, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2039?
CVE-2002-2039 has a moderate severity level, as it allows local users to access sensitive information.
2
How do I fix CVE-2002-2039?
To fix CVE-2002-2039, upgrade to a patched version of QNX RTOS that addresses this vulnerability.
3
Who is affected by CVE-2002-2039?
Local users of QNX RTOS versions 4.25 and 6.1.0 are affected by CVE-2002-2039.
4
What does CVE-2002-2039 exploit?
CVE-2002-2039 exploits the handling of core dump files by the /bin/su command in QNX RTOS.
5
Is CVE-2002-2039 a remote attack vector?
No, CVE-2002-2039 is a local vulnerability, meaning it can only be exploited by users with local access to the system.