QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit this issue to execute arbitrary cod...

CVE-2002-2407

CVE-2002-2407 concerns QNX Neutrino RTOS 6.2.0 patches that incorrectly set insecure permissions on a set of binaries (e.g., /sbin/io-audio, /bin/shutdown, /sbin/fs-pkg, phshutdown, plus game binaries in pack 2.0.3). The issue enables local users to gain privileges by modifying these files before...

CVE-2002-2409: Exposure of Sensitive Information to an Unauthorized Actor

Photon microGUI in QNX Neutrino realtime operating system RTOS 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID...

CVE-2002-2407: Undefined Security Weakness

Certain patches for QNX Neutrino realtime operating system RTOS 6.2.0 set insecure permissions for the files 1 /sbin/io-audio by OS Update Patch A, 2 /bin/shutdown, 3 /sbin/fs-pkg, and 4 phshutdown by QNX experimental patches, 5 cpim, 6 vpim, 7 phrelaycfg, and 8 columns, 9 othello, 10 peg, 11...

QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)

No description provided by source. / [email protected] c 2005, all rights reserved. sample exploit for phgrafx on QNX 6.3.0 x86 tested on: QNX qnx 6.3.0 2004/04/29-21:23:19UTC x86pc x86 / include sys/types.h include stdio.h include stdlib.h include dlfcn.h include unistd.h include err.h...

QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit

No description provided by source. !/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kisses from www.lort.dk. unset PAGER; man chmod |...

Command injection

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

Stack overflow

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0619

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long 1 ABLPATH or 2 ABLANG environment variables in the libAP library libAp.so.2 or 3 a long PHOTONPATH environment variable to the setitem function in the libph library...

CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

Race condition

Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2PATH environment variables...

Format string

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

CVE-2006-0621

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2006-0618

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

Buffer overflow

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2006-0618

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument program name...

CVE-2006-0619

CVE-2006-0619 describes multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0. Local users can execute arbitrary code by supplying overly long values in environment variables (ABLPATH, ABLANG in libAP.so.2 or PHOTON_PATH used by setitem in libph). The entry lists these vectors and affe...

CVE-2006-0621

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the 1 su or 2 passwd commands...

CVE-2006-0618

The CVE-2006-0618 entry concerns a format-string vulnerability in fontsleuth for the QNX Neutrino RTOS 6.3.0. The vulnerability allows a local user to run arbitrary code by supplying format specifiers via the zeroth argument (the program name). Affected component: fontsleuth within QNX Neutrino R...