← Vulnerability feed

Vulnerability record · CVE-2002-1239 · published 12 November 2002

CVE-2002-1239: Qnx rtos vulnerability

Qnx · Rtos

QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.

7.2 CVSS 2.0 High EPSS 0.90% · top 41.9%
7.2CVSS 2.0 base score
0.90%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html
http://marc.info/?l=bugtraq&m=103679043232178&w=2
http://www.idefense.com/advisory/11.08.02b.txt ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/10564.php Vendor Advisory
http://www.securityfocus.com/bid/6146
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html
http://marc.info/?l=bugtraq&m=103679043232178&w=2
http://www.idefense.com/advisory/11.08.02b.txt ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/10564.php Vendor Advisory
http://www.securityfocus.com/bid/6146

Track CVE-2002-1239 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1390Qnx rtos vulnerabilityMultiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1)…EPSS 7.3%7.2CVE-2006-0621Qnx rtos vulnerabilityMultiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passw…EPSS 0.50%7.2CVE-2006-0623Qnx rtos vulnerabilityQNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary c…EPSS 0.91%7.2CVE-2005-1528Qnx rtos vulnerabilityUntrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY…EPSS 0.84%7.2CVE-2002-2040Qnx rtos vulnerabilityThe (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executi…EPSS 1.1%7.2CVE-2002-2041Qnx rtos vulnerabilityMultiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment va…EPSS 1.2%7.2CVE-2002-2042Qnx rtos vulnerabilityptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to…EPSS 1.0%6.9CVE-2002-2407Qnx rtos permissions and access controls vulnerabilityCertain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch …EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2002-1239), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.