CVEブラウザに戻る

CVE-2004-1682

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0280%

EPSS Percentile3.82th

Published2004年8月15日

Last Modified2026年4月16日

Vulnerability Description

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Affected Platforms (CPE)

📦

Qnx

Rtp

= 6.1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=109511327005476&w=2

🔗 http://secunia.com/advisories/12533

🔗 http://www.rfdslabs.com.br/qnx-advs-04-2004.txt

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17347

🔗 http://marc.info/?l=bugtraq&m=109511327005476&w=2

🔗 http://secunia.com/advisories/12533

🔗 http://www.rfdslabs.com.br/qnx-advs-04-2004.txt

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17347

関連する脆弱性情報

CVE-2015-720510.0

Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5...

CVE-2004-139010.0

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long ...

CVE-2019-171929.8

The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packet...

CVE-2018-63509.8

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for ...