QNX Photon phlocale - -s Overflow

2004-09-13T00:00:00
ID EXPLOITPACK:6A40F233855C7D8A8BFB6CD26CC4D984
Type exploitpack
Reporter Julio Cesar Fort
Modified 2004-09-13T00:00:00

Description

QNX Photon phlocale - -s Overflow

                                        
                                            source: https://www.securityfocus.com/bid/11164/info
 
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
 
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.


$ /usr/photon/bin/phlocale -s AAAAA[...]