Qnx Security Vulnerabilities

CVE-2000-0250

The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.

CVE-2001-0624

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.

CVE-2005-4082

The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks.