CVE-2002-2040

The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the…

published July 14, 2005

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01083 · 64.7th percentile
Published
2005-07-14T04:00Z
EPSS history
Timeline
  • 14 JUL 04:00Z
    The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the…
    cvelistv5