vulnwire
2.1low

CVE-2002-20391 exploit

/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by s…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 58%
Public exploits
1
Exploit-DB

/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.

Exploit prediction (EPSS)

0.84% probability of exploitation in the next 30 days, higher than 58% of all scored CVEs.

Exploits and detections

  • EDB-21502 QNX RTOS 4.25/6.1 - su Password Hash Disclosure · local · 2002-06-03

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • iss.net /security_center/static/9256.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/4914 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=bugtraq&m=102312549511726&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.