CVE

Id
9819  
CVE No.
CVE-2004-1391  
Status
Candidate  
Description
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.  
Phase
Assigned (20050205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66951 9819 CVE-2004-1391 FULLDISC:20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities  View
66952 9819 CVE-2004-1391 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html  View
66953 9819 CVE-2004-1391 MISC:http://www.rfdslabs.com.br/qnx-advs-01-2004.txt  View
66954 9819 CVE-2004-1391 CERT-VN:VU#577566  View
66955 9819 CVE-2004-1391 URL:http://www.kb.cert.org/vuls/id/577566  View
66956 9819 CVE-2004-1391 BID:11105  View
66957 9819 CVE-2004-1391 URL:http://www.securityfocus.com/bid/11105  View
66958 9819 CVE-2004-1391 OSVDB:9661  View
66959 9819 CVE-2004-1391 URL:http://www.osvdb.org/9661  View
66960 9819 CVE-2004-1391 XF:qnx-rtp-mount-command-execute(17284)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63123 JVNDB-2004-000465 PHP の cURL 関数におけるセキュリティ制限を回避される脆弱性 PHP には、特定の cURL 関数において、open_basedir ディレクティブによる制限が正しく適用されないため、制限されたディレクトリ外のファイルへのアクセスを許可してしまう脆弱性が存在します。 CVE-2004-1392 9819 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000465.html  View