Vulnerability record · CVE-2004-1390 · published 31 December 2004

CVE-2004-1390: Qnx rtos vulnerability

Qnx · Rtos

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.

10.0 CVSS 2.0 High EPSS 7.3% · top 5.8%

10.0CVSS 2.0 base score

7.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

10References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Rtos Qnx

Rtp Qnx

References

Link	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html
http://www.kb.cert.org/vuls/id/961686	Third Party AdvisoryUS Government Resource
http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
http://www.securityfocus.com/bid/11104	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17280
http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html
http://www.kb.cert.org/vuls/id/961686	Third Party AdvisoryUS Government Resource
http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
http://www.securityfocus.com/bid/11104	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17280

Track CVE-2004-1390 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1682Qnx rtp vulnerabilityFormat string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the …EPSS 2.5%15 Aug 2004 7.5CVE-2001-0325Qnx rtp vulnerabilityBuffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of ar…EPSS 2.1%3 May 2001 7.2CVE-2006-0621Qnx rtos vulnerabilityMultiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passw…EPSS 0.50%9 Feb 2006 7.2CVE-2006-0623Qnx rtos vulnerabilityQNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary c…EPSS 0.91%9 Feb 2006 7.2CVE-2005-1528Qnx rtos vulnerabilityUntrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY…EPSS 0.84%31 Dec 2005 7.2CVE-2004-1681Qnx photon microgui vulnerabilityMultiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local us…EPSS 1.1%26 Aug 2004 7.2CVE-2002-2040Qnx rtos vulnerabilityThe (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executi…EPSS 1.1%31 Dec 2002 7.2CVE-2002-2041Qnx rtos vulnerabilityMultiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment va…EPSS 1.2%31 Dec 2002

Source: NIST National Vulnerability Database (record CVE-2004-1390), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.