CVE-2002-1633

MEDIUM 4.6CVE-2002-1633 · Published 31/12/2002 · updated 16/06/2026

In short

CVE-2002-1633 is a MEDIUM (CVSS 4.6) vulnerability affecting qnx rtos (qnx).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
qnx rtos qnx	`= 4.25`	No fix yet

Description

Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.

References

kb.cert.org/vuls/id/879386 · US Government Resource
securityfocus.com/archive/1/276553 · Exploit
securityfocus.com/bid/5000
exchange.xforce.ibmcloud.com/vulnerabilities/9341

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free