CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2006-02-09

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Rtos (Qnx)

References

• http://secunia.com/advisories/18750
• http://securitytracker.com/id?1015599
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382
• http://www.osvdb.org/22964
• http://www.osvdb.org/22965
• http://www.securityfocus.com/bid/16539
• http://www.vupen.com/english/advisories/2006/0474
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24557
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24558