CVE-2002-0793
CWE-59Published: August 12, 2002· Updated: Jun 16, 2026
Official Description
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Technical Analysis
CVE-2002-0793 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 5.5.
A proof-of-concept (PoC) exploit exists for CVE-2002-0793. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
Official Patches & Advisories
All References (18)
Quick Facts
Related CVEs (CWE-59)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2002-0793 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts