CVE-2004-1390: Qnx Rtos

High severity, CVSS 10.0. EPSS: 7.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.

Affected products

• Qnx Rtos: version 2.4 only; version 4.25 only; version 6.1.0 only; version 6.2.0 only; version 6.2.0a only
• Qnx Rtp: version 6.1 only

Published 2004-12-31. Last modified 2026-06-16.