CVE-2002-0793
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.3%
from disclosure to weapon0 days
Published on NVDJul 26
1st PoCMay 31
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21501exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21500exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21499⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/9232https://exchange.xforce.ibmcloud.com/vulnerabilities/9233https://exchange.xforce.ibmcloud.com/vulnerabilities/9234http://www.iss.net/security_center/static/9231.phphttp://www.securityfocus.com/bid/4901http://www.securityfocus.com/bid/4902http://www.securityfocus.com/bid/4903http://www.securityfocus.com/bid/4904