CVE-2002-2040

CVE-2002-2040 affects QNX RTOS versions 4.25 and 6.1.0, where the phrafx and phgrafx-startup programs fail to drop privileges before running the system command. This allows local users to execute arbitrary commands by manipulating the PATH to reference a malicious crttrap program. Impact is descr...

CVE-2002-2040: Undefined Security Weakness

The 1 phrafx and 2 phgrafx-startup programs in QNX realtime operating system RTOS 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap...