CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/18750	Vendor Advisory
http://securitytracker.com/id?1015599
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381	Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382	Vendor Advisory
http://www.osvdb.org/22964
http://www.osvdb.org/22965
http://www.securityfocus.com/bid/16539
http://www.vupen.com/english/advisories/2006/0474	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24557
https://exchange.xforce.ibmcloud.com/vulnerabilities/24558

Configurations

Configuration 1 (hide)

cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-02-09 02:02

Updated : 2024-02-28 10:42

NVD link : CVE-2006-0619

Mitre link : CVE-2006-0619

CVE.ORG link : CVE-2006-0619

JSON object : View

Products Affected

qnx

rtos

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2006-0619", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-02-09T02:02:00.000", "references": [{"url": "http://secunia.com/advisories/18750", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1015599", "source": "cve@mitre.org"}, {"url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22964", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22965", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16539", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0474", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24557", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24558", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library."}], "lastModified": "2017-07-20T01:29:55.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F795DA5-84CB-4772-BC54-91B1DB760BEC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}