3 matches found
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.
CVE-2005-4082
The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks.