CVE-2014-2534
Summary
| CVE | CVE-2014-2534 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-03-18 05:18:00 UTC |
| Updated | 2014-04-01 06:29:00 UTC |
| Description | /sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the root password hash in /etc/shadow. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.4.1 | All | All | All |
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.5.0 | All | All | All |
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.5.0 | sp1 | All | All |
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.4.1 | All | All | All |
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.5.0 | All | All | All |
| Operating System | Blackberry | Qnx Neutrino Rtos | 6.5.0 | sp1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Bugtraq: Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS | BUGTRAQ | seclists.org | |
| Full Disclosure: Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS | FULLDISC | seclists.org | |
| QNX 6.4.x/6.5.x pppoectl - Information Disclosure | EXPLOIT-DB | www.exploit-db.com | Exploit |
| Full Disclosure: Medium severity flaw in BlackBerry QNX Neutrino RTOS | FULLDISC | seclists.org | |
| Bugtraq: Medium severity flaw in BlackBerry QNX Neutrino RTOS | BUGTRAQ | seclists.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.