CVE-2002-0793 - CVE House
Back to Database
Status published Medium CVE-2002-0793

Hard link and possibly symbolic link following vulnerabilities in QNX...

Vulnerability Description

Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0793

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackberry

View All →
CVE-2021-22155
An Authentication Bypass vulnerability in the SAML Authentication component of...
High 8.8
CVE-2021-22154
An Information Disclosure vulnerability in the Management Console component of...
Medium 5.3
CVE-2021-22153
A Remote Code Execution vulnerability in the Management Console component...
High 7.3
CVE-2021-22152
A Denial of Service due to Improper Input Validation vulnerability...
Medium 5.5
CVE-2016-3126
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry...
Medium 6.1

Affected Vendor

Affected Software

qnx neutrino real-time operating system
Vulnerable Versions:
4.25

Timeline

Official Publish: July 26th, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.