CVE-2014-2533

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2014-03-18

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Qnx Neutrino Rtos (Blackberry)

References

• http://seclists.org/bugtraq/2014/Mar/66
• http://seclists.org/bugtraq/2014/Mar/88
• http://seclists.org/fulldisclosure/2014/Mar/124
• http://seclists.org/fulldisclosure/2014/Mar/98
• http://www.exploit-db.com/exploits/32153/
• https://www.exploit-db.com/exploits/45575/