← Voltar para CVEs

CVE-2006-0619

N/A

Descricao

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/9/2006

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

qnx:rtos

Fraquezas (CWE)

CWE-119

Referencias

http://secunia.com/advisories/18750(cve@mitre.org)

http://securitytracker.com/id?1015599(cve@mitre.org)

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381(cve@mitre.org)

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382(cve@mitre.org)

http://www.osvdb.org/22964(cve@mitre.org)

http://www.osvdb.org/22965(cve@mitre.org)

http://www.securityfocus.com/bid/16539(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/0474(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/24557(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/24558(cve@mitre.org)

http://secunia.com/advisories/18750(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1015599(af854a3a-2127-422b-91ae-364da2661108)

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381(af854a3a-2127-422b-91ae-364da2661108)

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/22964(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/22965(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/16539(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/0474(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/24557(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/24558(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.