First published: Tue Dec 31 2002(Updated: )
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
QNX RTOS | =4.25 | |
QNX RTOS | =6.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2042 is considered to be of high severity due to the potential for local users to execute arbitrary code.
To fix CVE-2002-2042, you should upgrade to the latest version of QNX RTOS that has patched this vulnerability.
CVE-2002-2042 poses a risk as it allows unauthorized access to privileged processes through the ptrace function.
CVE-2002-2042 affects users of QNX RTOS versions 4.25 and 6.1.0 that do not implement security measures for ptrace.
Yes, CVE-2002-2042 can lead to system compromises if an attacker gains the ability to execute arbitrary code on a vulnerable system.