Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20140311 Date: 11th March 2014 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...

QNX Neutrino RTOS 6.5.0 Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20140311 Date: 11th March 2014 Author: Tim Brown URL: / Product: QNX Neutrino RTOS 6.5.0 Vendor: BlackBerry Risk: Medium Summary This advisory concerns the forced disclosure of 2 vulnerabilities that were previous...

CVE-2013-2688

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of t...

Buffer overflow

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of t...

CVE-2013-2687

Stack-based buffer overflow in the bpedecompress function in 1 BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and 2 QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute...

Stack overflow

Stack-based buffer overflow in the bpedecompress function in 1 BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and 2 QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2013-2687

Stack-based buffer overflow in the bpedecompress function in 1 BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and 2 QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2013-2687

CVE-2013-2687 describes a stack-based buffer overflow in the bpe_decompress function across BlackBerry QNX Neutrino RTOS (up to 6.5.0 SP1) and QNX Momentics Tool Suite (up to 6.5.0 SP1). The flaw can be triggered by crafted packets to TCP port 4868, enabling remote DoS (application crash) and pot...

CVE-2013-2688

CVE-2013-2688 affects BlackBerry QNX Neutrino RTOS (phrelay) via the /dev/photon interface. A stack/size-mismatch vulnerability in Phrelay can be triggered by crafted UDP packets to port 4868, enabling remote DoS or potentially arbitrary code execution. Affected products include Phrelay in QNX Ne...

CVE-2013-2688

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of t...

QNX phrelay/phindows/phditto - Multiple Vulnerabilities

Luigi Auriemma Application: QNX phrelay/phindows/phditto http://www.qnx.com http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.phindows/topic/coverpage.html http://www.qnx.com/developers/docs/6.4.1/neutrino/utilities/p/phrelay.html Versions: current Platforms: QNX Neutrino RTOS and Window...

QNX phrelayphindowsphditto - Multiple Vulnerabilities

QNX phrelayphindowsphditto - Multiple Vulnerabilities Luigi Auriemma Application: QNX phrelay/phindows/phditto http://www.qnx.com http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.phindows/topic/coverpage.html http://www.qnx.com/developers/docs/6.4.1/neutrino/utilities/p/phrelay.html...

CVE-2011-4060

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack...

CVE-2011-4060

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack...

CVE-2011-4060

The CVE-2011-4060 issue affects QNX Neutrino RTOS 6.5.0 before Service Pack 1, where the runtime linker does not properly clear LD_DEBUG_OUTPUT and LD_DEBUG environment variables when spawning a program from a setuid context. This allows local users to manipulate file system state via a symlink a...

Medium severity flaw in QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110310 Date: 10th March 2011 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...

QNX RTOS 6.4 - .ELF Binary File Local Denial of Service

QNX RTOS 6.4 - .ELF Binary File Local Denial of Service source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable;...

QNX RTOS 6.4 - '.ELF' Binary File Local Denial of Service

source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable; other versions may also be affected...

CVE-2008-3024

CVE-2008-3024 describes a stack-based buffer overflow in the phgrafx component of QNX Momentics (RTOS) 6.3.2 and earlier. The overflow is triggered by a long *.pal filename in the palette/ path, allowing local users to gain privileges. The vulnerability is local and does not indicate network acce...

QNX Neutrino RTOS phgrafx本地栈溢出漏洞

BUGTRAQ ID: 30024 QNX Neutrino RTOS是嵌入系统中所使用的实时操作系统。 QNX RTOS的/usr/photon/bin/phgrafx文件没有正确地处理PHOTONPATH/palette/.pal文件，如果用户在palette目录中创建了文件名大于285字符的.pal扩展名的话，就会触发栈溢出，允许攻击者完全控制程序流。 QNX Neutrino RTOS 6.3.2 QNX Neutrino RTOS 6.3.0 QNX --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...