CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0618

The CVE-2006-0618 entry concerns a format-string vulnerability in fontsleuth for the QNX Neutrino RTOS 6.3.0. The vulnerability allows a local user to run arbitrary code by supplying format specifiers via the zeroth argument (the program name). Affected component: fontsleuth within QNX Neutrino R...

CVE-2006-0621

CVE-2006-0621 describes multiple buffer overflows in QNX Neutrino RTOS 6.2.0 that allow a local user to execute arbitrary code by supplying a long first argument to the (1) su or (2) passwd commands. The issue stems from unsafe handling in those utilities, enabling local code execution with full ...

CVE-2006-0619

CVE-2006-0619 describes multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0. Local users can execute arbitrary code by supplying overly long values in environment variables (ABLPATH, ABLANG in libAP.so.2 or PHOTON_PATH used by setitem in libph). The entry lists these vectors and affe...

CVE-2006-0621

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0620

CVE-2006-0620 describes a race condition in the phfont component of QNX Neutrino RTOS 6.2.1. The flaw allows local users to execute arbitrary code through unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. Connected documents do not provide additional technical specif...

CVE-2006-0618

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

CVE-2006-0622

CVE-2006-0622 affects QNX Neutrino RTOS 6.3.0 . The vulnerability allows local users to cause a denial of service (hang) by supplying a command to gdb: specifically triggering with the string "break *0xb032d59f". The associated sources in the connected documents corroborate the page-level descrip...

CVE-2006-0623

CVE-2006-0623 is associated with QNX Neutrino RTOS 6.3.0. The vulnerability arises because /etc/rc.d/rc.local is shipped with world-writable permissions, allowing local users to modify the file and thereby execute arbitrary code at system startup. The connected records confirm the affected softwa...

CVE-2005-1528

CVE-2005-1528 affects QNX Neutrino RTOS 6.2.1, where the crttrap command is vulnerable to untrusted search path issues. A local user can set LD_LIBRARY_PATH to point to a malicious library, which crttrap may load, leading to arbitrary code execution with root privileges because crttrap is install...

CVE-2005-1528

Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LDLIBRARYPATH environment variable that references a malicious library...

QNX RTOS 6.3.0 - Insecure rc.local Permissions System Crash Privilege Escalation

QNX RTOS 6.3.0 - Insecure rc.local Permissions System Crash Privilege Escalation !/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kiss...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability

QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use i...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability

QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for u...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability

QNX RTOS 6.3.0 Local Denial of Service Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedde...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability

QNX Neutrino RTOS phfont Race Condition Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedd...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow

QNX Neutrino RTOS su Command Buffer Overflow iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=385 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedded system...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libph PHOTON_PATH Buffer Overflow Vulnerability

QNX Neutrino RTOS libph PHOTONPATH Buffer Overflow Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for us...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability

QNX Neutrino RTOS fontsleuth Command Format String Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for us...