CVE-2014-2533

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
blackberryqnx_neutrino_rtos
6.4.1
blackberryqnx_neutrino_rtos
6.5.0
blackberryqnx_neutrino_rtos
6.5.0:sp1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/bugtraq/2014/Mar/66
http://seclists.org/bugtraq/2014/Mar/88
http://seclists.org/fulldisclosure/2014/Mar/124
http://seclists.org/fulldisclosure/2014/Mar/98
http://www.exploit-db.com/exploits/32153/
https://www.exploit-db.com/exploits/45575/
http://seclists.org/bugtraq/2014/Mar/66
http://seclists.org/bugtraq/2014/Mar/88
http://seclists.org/fulldisclosure/2014/Mar/124
http://seclists.org/fulldisclosure/2014/Mar/98
http://www.exploit-db.com/exploits/32153/
https://www.exploit-db.com/exploits/45575/