CVE-2006-0623

CVE-2006-0623 is associated with QNX Neutrino RTOS 6.3.0. The vulnerability arises because /etc/rc.d/rc.local is shipped with world-writable permissions, allowing local users to modify the file and thereby execute arbitrary code at system startup. The connected records confirm the affected softwa...

CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0620

CVE-2006-0620 describes a race condition in the phfont component of QNX Neutrino RTOS 6.2.1. The flaw allows local users to execute arbitrary code through unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. Connected documents do not provide additional technical specif...

CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0621

CVE-2006-0621 describes multiple buffer overflows in QNX Neutrino RTOS 6.2.0 that allow a local user to execute arbitrary code by supplying a long first argument to the (1) su or (2) passwd commands. The issue stems from unsafe handling in those utilities, enabling local code execution with full ...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0622

CVE-2006-0622 affects QNX Neutrino RTOS 6.3.0 . The vulnerability allows local users to cause a denial of service (hang) by supplying a command to gdb: specifically triggering with the string "break *0xb032d59f". The associated sources in the connected documents corroborate the page-level descrip...

CVE-2005-1528

Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LDLIBRARYPATH environment variable that references a malicious library...

CVE-2005-1528

CVE-2005-1528 affects QNX Neutrino RTOS 6.2.1, where the crttrap command is vulnerable to untrusted search path issues. A local user can set LD_LIBRARY_PATH to point to a malicious library, which crttrap may load, leading to arbitrary code execution with root privileges because crttrap is install...

CVE-2006-0621: Undefined Security Weakness

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2005-1528: Undefined Security Weakness

Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LDLIBRARYPATH environment variable that references a malicious library...

CVE-2006-0620: Undefined Security Weakness

Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2PATH environment variables...

CVE-2006-0623: Undefined Security Weakness

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0622: Undefined Security Weakness

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0619: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0618: Undefined Security Weakness

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

QNX RTOS 6.3.0 - Insecure 'rc.local' Permissions System Crash / Privilege Escalation

!/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kisses from www.lort.dk. unset PAGER; man chmod | mail -s "urgent reading"...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability

QNX Neutrino RTOS phfont Race Condition Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedd...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow

QNX Neutrino RTOS su Command Buffer Overflow iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=385 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedded system...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability

QNX RTOS 6.3.0 Local Denial of Service Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedde...