CVE-2002-2041

QNX RTOS 6.1.0 - Local Buffer Overflow via ABLANG Environment Variable or pkg-installer -u Option

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2002-2041. PoCs published by badc0ded.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the QNX pkg-installer utility via the '-U' command-line option. It uses a shellcode payload to achieve remote code execution by overwriting the return address with a hardcoded system() address.

Description

Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment variable in phlocale or (2) a long -u option to pkg-installer.

Exploits (2)

exploitdb WORKING POC VERIFIED
by badc0ded · clocallinux
https://www.exploit-db.com/exploits/21506

This exploit targets a buffer overflow vulnerability in the QNX pkg-installer utility via the '-U' command-line option. It uses a shellcode payload to achieve remote code execution by overwriting the return address with a hardcoded system() address.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: QNX pkg-installer (version not specified)
No auth needed
Prerequisites: Access to execute pkg-installer · Knowledge of system() address in memory
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by badc0ded · clocallinux
https://www.exploit-db.com/exploits/21505

This exploit targets a buffer overflow in QNX phlocale via the ABLANG environment variable. It uses shellcode to spawn a root shell by overwriting the return address with a system() call.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: QNX phlocale (version unspecified)
No auth needed
Prerequisites: QNX system with vulnerable phlocale binary · Ability to set environment variables
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4917
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9258.php
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/275218
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9259.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4918

Scores

EPSS 0.0124
EPSS Percentile 65.2%

Details

Status published
Products (1)
qnx/rtos 6.1.0
Published Dec 31, 2002
Tracked Since Feb 18, 2026