CVE-2004-1390

Multiple buffer overflows in the PPPoE daemon PPPoEd in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the 1 -F, 2 name, 3 en, 4 upscript, 5 downscript, 6 retries, 7 timeout, 8 scriptdetach, 9 noscript, 10 nodetach, 11 remotemac, or 12 localmac flags...

QNX crttrap unauthorized file access

-c option can be user to read/write any file...

[Full-Disclosure] QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004]

rfdslabs security advisory Title: QNX crrtrap arbitrary file read/write vulnerability RLSA06-2004 Versions: QNX RTOS 2.4, 4.25, 6.1.0, 6.2.0 + Update Patch A Vendor: http://www.qnx.com Date: Dec 11 2004 Author: Julio Cesar Fort julio NOSPAM rfdslabs com br 1. Introduction crrtrap is a tool to...

[RLSA_04-2004] QNX crrtrap possible race condition vulnerability

rfdslabs security advisory Title: QNX crrtrap possible race condition vulnerability RLSA04-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: Sep 13 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction crrtrap is a tool to detect video hardware and start...

[RLSA_03-2004] QNX ftp client format string bug

rfdslabs security advisory Title: QNX ftp client format string bug RLSA03-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 13 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction "QNX Software Systems has provided OS technology, development tools,...

Multipel QNX utilities bugs

Buffer overflow in Photon, format string in FTP client, race conditions in crrtrap...

[RLSA_02-2004] QNX Photon multiple buffer overflows

rfdslabs security advisory Title: QNX Photon multiple buffer overflows RLSA02-2004 Versions: QNX RTP 6.1 possibly others Vendor: QNX Software Systems http://www.qnx.com Date: 13 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction QNX Photon microGUI is the windowing system ...

CVE-2004-1683

A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...

QNX Photon phlocale - -s Overflow

QNX Photon phlocale - -s Overflow source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string...

QNX Photon phlocale - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...

QNX Photon input-cfg - -s Overflow

QNX Photon input-cfg - -s Overflow source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string...

QNX Photon phrelay-cfg - -s Overflow

QNX Photon phrelay-cfg - -s Overflow source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string...

QNX Photon pkg-installer - -s Overflow

QNX Photon pkg-installer - -s Overflow source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string...

QNX Photon input-cfg - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...

QNX Photon phrelay-cfg - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...

QNX Photon pkg-installer - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...

qnx-pppoed-multiple-flaws.txt

rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL, for QNX users. More...

[RLSA_01-2004] QNX PPPoEd local root vulnerabilities

rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL...

QNX PPPoEd buffer overflows

Multipel buffer overflows on arguments parsing...

QNX PPPoEd 2.4/4.25/6.2 - Multiple Local Buffer Overrun Vulnerabilities

source: https://www.securityfocus.com/bid/11104/info QNX PPPoEd is reported to be prone to multiple local buffer overflow vulnerabilities. The issues presents themselves when PPPoEd handles certain command line arguments that are greater than 256 bytes in length. Because variables that are crucia...