Home  >  CVE-2004-1390
CVE Details for CVE: CVE-2004-1390
Summary
Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.
Timestamps
Last major update 11-07-2017 - 01:30
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:30
References
Vulnerable Configurations
  • cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:qnx:rtos:6.2.0a:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtos:6.2.0a:*:*:*:*:*:*:*
  • cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qnx:rtos:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtos:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*
    cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 11104
cert-vn VU#961686
fulldisc 20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities
misc http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
xf Qnx-rtp-pppoed-flags-bo(17280)