CVE-2004-1390: Buffer Overflow

Published Dec 31, 2004

Updated

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remotemac, or (12) localmac flags.

Affected Software

6 affected components

QNX RTOS=2.4

QNX RTOS=4.25

QNX RTOS=6.1.0

QNX RTOS=6.2.0

QNX RTOS=6.2.0a

QNX RTP=6.1

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 6, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1390?

CVE-2004-1390 is classified as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2004-1390?

To fix CVE-2004-1390, upgrade to a patched version of QNX RTP 6.1 or later that addresses the buffer overflow issues.

What software is affected by CVE-2004-1390?

CVE-2004-1390 affects multiple versions of QNX RTP 6.1 and various editions of QNX RTOS.

Can CVE-2004-1390 be exploited remotely?

Yes, CVE-2004-1390 can be exploited remotely by attackers sending crafted arguments to the affected PPPoE daemon.

What are the potential impacts of CVE-2004-1390?

The potential impacts of CVE-2004-1390 include unauthorized access and execution of arbitrary code on vulnerable systems.