What’s Vulnerable › Vulnerabilities

CVE-2014-2534

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-03-18 · updated 2026-06-17
• Weakness: CWE-264

Description

/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the root password hash in /etc/shadow.

Affected products

• BlackBerry Qnx Neutrino Rtos: 6.4.1, 6.5.0, 6.5.0-sp1

References

• http://seclists.org/bugtraq/2014/Mar/66
• http://seclists.org/bugtraq/2014/Mar/88
• http://seclists.org/fulldisclosure/2014/Mar/124
• http://seclists.org/fulldisclosure/2014/Mar/98
• http://www.exploit-db.com/exploits/32156/
• http://seclists.org/bugtraq/2014/Mar/66
• http://seclists.org/bugtraq/2014/Mar/88
• http://seclists.org/fulldisclosure/2014/Mar/124
• http://seclists.org/fulldisclosure/2014/Mar/98
• http://www.exploit-db.com/exploits/32156/

Get alerted when CVE-2014-2534 or the next vulnerability affects your stack