Vulnerability record · CVE-2002-2407 · published 31 December 2002

CVE-2002-2407: Qnx rtos permissions and access controls vulnerability

Qnx · Rtos

Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed.

6.9 CVSS 2.0 Medium EPSS 0.29% · top 80.8% CWE-264 · Permissions and access controls

6.9CVSS 2.0 base score

0.29%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Rtos Qnx

References

Link	Tags
http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html
http://www.iss.net/security_center/static/10656.php
http://www.securityfocus.com/bid/6206
http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html
http://www.iss.net/security_center/static/10656.php
http://www.securityfocus.com/bid/6206

Track CVE-2002-2407 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1390Qnx rtos vulnerabilityMultiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1)…EPSS 7.3%31 Dec 2004 7.2CVE-2006-0621Qnx rtos vulnerabilityMultiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passw…EPSS 0.50%9 Feb 2006 7.2CVE-2006-0623Qnx rtos vulnerabilityQNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary c…EPSS 0.91%9 Feb 2006 7.2CVE-2005-1528Qnx rtos vulnerabilityUntrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY…EPSS 0.84%31 Dec 2005 7.2CVE-2002-2040Qnx rtos vulnerabilityThe (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executi…EPSS 1.1%31 Dec 2002 7.2CVE-2002-2041Qnx rtos vulnerabilityMultiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment va…EPSS 1.2%31 Dec 2002 7.2CVE-2002-2042Qnx rtos vulnerabilityptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to…EPSS 1.0%31 Dec 2002 7.2CVE-2002-1239Qnx rtos vulnerabilityQNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows loca…EPSS 0.90%12 Nov 2002

Source: NIST National Vulnerability Database (record CVE-2002-2407), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.