CVE-2004-1682: Critical severity QNX RTP vulnerability
Published Aug 15, 2004
·Updated
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
Affected Software
1 affected component
QNX RTP=6.1
Event History
Aug 15, 2004
CVE Published
04:00 AM
Feb 20, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1682?
CVE-2004-1682 has a severity rating that can lead to potential privilege escalation for remote authenticated users.
2
How do I fix CVE-2004-1682?
To mitigate CVE-2004-1682, it is recommended to upgrade to a patched version of the QNX RTP software.
3
Who is affected by CVE-2004-1682?
Only remote authenticated users of QNX 6.1 FTP client are affected by CVE-2004-1682.
4
What systems are vulnerable to CVE-2004-1682?
CVE-2004-1682 affects systems running QNX RTP version 6.1.
5
What is the attack vector for CVE-2004-1682?
The attack vector for CVE-2004-1682 involves the use of format string specifiers in the QUOTE command within the FTP client.