QNX RTOS 6.4 - .ELF Binary File Local Denial of Service

QNX RTOS 6.4 - .ELF Binary File Local Denial of Service source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable;...

QNX RTOS 6.4 - '.ELF' Binary File Local Denial of Service

source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable; other versions may also be affected...

CVE-2008-3024

CVE-2008-3024 describes a stack-based buffer overflow in the phgrafx component of QNX Momentics (RTOS) 6.3.2 and earlier. The overflow is triggered by a long *.pal filename in the palette/ path, allowing local users to gain privileges. The vulnerability is local and does not indicate network acce...

QNX Neutrino RTOS phgrafx本地栈溢出漏洞

BUGTRAQ ID: 30024 QNX Neutrino RTOS是嵌入系统中所使用的实时操作系统。 QNX RTOS的/usr/photon/bin/phgrafx文件没有正确地处理PHOTONPATH/palette/.pal文件，如果用户在palette目录中创建了文件名大于285字符的.pal扩展名的话，就会触发栈溢出，允许攻击者完全控制程序流。 QNX Neutrino RTOS 6.3.2 QNX Neutrino RTOS 6.3.0 QNX --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

[SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability

QNX phgrafx Privilege Escalation Vulnerability Scanit R&D Labs Security Advisory http://www.scanit.net/rd/advisories/ Jun 30, 2008 Filename: SCANIT-2008-001.txt SCANIT ID: SCANIT-2008-001 Published: June 30th, 2008 I. Summary QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating...

QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit this issue to execute arbitrary cod...

CVE-2002-2407

CVE-2002-2407 concerns QNX Neutrino RTOS 6.2.0 patches that incorrectly set insecure permissions on a set of binaries (e.g., /sbin/io-audio, /bin/shutdown, /sbin/fs-pkg, phshutdown, plus game binaries in pack 2.0.3). The issue enables local users to gain privileges by modifying these files before...

QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit

No description provided by source. !/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kisses from www.lort.dk. unset PAGER; man chmod |...

QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)

No description provided by source. / [email protected] c 2005, all rights reserved. sample exploit for phgrafx on QNX 6.3.0 x86 tested on: QNX qnx 6.3.0 2004/04/29-21:23:19UTC x86pc x86 / include sys/types.h include stdio.h include stdlib.h include dlfcn.h include unistd.h include err.h...

Race condition

Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2PATH environment variables...

CVE-2006-0618

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

Command injection

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

Buffer overflow

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0621

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

Stack overflow

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

Format string

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...