618 matches found
CVE-2001-0325
CVE-2001-0325 affects QNX RTP 5.60. The vulnerability is a buffer/stack overflow in parsing arguments to the stat command (also described as a strtok()-related overflow in the FTP stat handling), allowing a remote attacker to cause a denial of service and potentially execute arbitrary code. Conne...
CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page...
CVE-2000-0903
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0903
CVE-2000-0903 concerns a directory traversal vulnerability in the Voyager web server 2.01B bundled with the QNX 405 demo disks. The issue allows remote attackers to read arbitrary files by performing a dot-dot (.. ) traversal. The affected component is the Voyager web server; root cause is improp...
CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page...
CVE-2000-0905
QNX Embedded Resource Manager (Voyager web server 2.01B on QNX 405 demo disks) is affected. Remote attackers can read sensitive system statistics via embedded.html. The CVE entry (CVE-2000-0905) has a NVD base score of 5.0 (Medium). No explicit remediation or patch information is provided in the ...
CVE-2000-0904
The CVE-2000-0904 entry concerns Voyager Web Server 2.01B (demo disks for QNX 405). The vulnerability arises from the server storing sensitive web client information in the .photon directory within the web document root, enabling remote attackers to retrieve that data. The available documents do ...
CVE-2000-0903
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0904
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information...
Multiple QNX Voyager Issues
Tested Versions: QNX Voyager 2.01B Tested Distributions: QNX Demo Disk Modem v405 QNX Demo Disk Network v405 Distributor: QNX Software Systems Limited http://www.qnx.com Distributor Status: No response after 3 weeks Intro: QNX is a whole operating system aimed at the embedded computing market. Th...
Дырка в QNX Voyager
Обратный путь в директориях позволяет доступ к любым системным файлам...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-2000-0250
CVE-2000-0250 : The crypt function in QNX uses weak encryption, enabling local users to decrypt passwords. The available documents state this vulnerability stems from weak cryptography used by QNX’s crypt function, with impact described as complete confidentiality loss for locally accessible pass...
qnx crypt comprimised
the crypt function for qnx turned out to a bit mixer, not a hash function. It's now possible to extract plaintext from the hashes. On a related note, all IOpeners running qnx use the same root password. Telnetd is running, and allows remote login as root. This is a huge security hole, as you can...
Скомпромитирован crypt() в QNX
Для шифрования пароля используется обратимый алгоритм битового вращения, который позволяет восстановить исходный текстовй пароль...
QSSL QNX 4.25 A - 'crypt()' Local Privilege Escalation
/ source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on a variant of the DES encryption...
QSSL QNX 4.25 A - crypt() Local Privilege Escalation
QSSL QNX 4.25 A - crypt Local Privilege Escalation / source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants,...