CVE-2002-0793
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.3%
from disclosure to weaponsame day
Published on NVDJul 26
1st PoCMay 31
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21501exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21499exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21500⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/9232https://exchange.xforce.ibmcloud.com/vulnerabilities/9233https://exchange.xforce.ibmcloud.com/vulnerabilities/9234http://www.iss.net/security_center/static/9231.phphttp://www.securityfocus.com/bid/4901http://www.securityfocus.com/bid/4902http://www.securityfocus.com/bid/4903http://www.securityfocus.com/bid/4904