CVE-2002-1239

CVE-2002-1239 describes a privilege escalation vulnerability in QNX Neutrino RTOS 6.2.0. The operating system uses the PATH environment variable to locate and execute the 'cp' program when operating with elevated privileges, allowing a local attacker to gain root access by manipulating the PATH to point to a malicious 'cp' executable. This vulnerability has a CVSS score of 7.2, indicating high severity due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation is reported, an exploit module (EDB-22002) exists on ExploitDB, and there is minimal community discussion or media coverage surrounding this older CVE.