Searching rtos software vulnerabilities

Hard link and possibly symbolic link following

vulnerabilities | following | symbolic | possibly | RTOS | Hard | link | QNX |

Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.


The timer implementation in QNX RTOS 6.1.0 allo

implementation | timer | RTOS | QNX |

The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick.


/bin/su in QNX realtime operating system (RTOS)

operating | realtime | /bin/su | system | QNX |

/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.


The (1) phrafx and (2) phgrafx-startup programs


The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program.


Multiple buffer overflows in realtime operating

overflows | operating | Multiple | realtime | system | buffer |

Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment variable in phlocale or (2) a long -u option to pkg-installer.


ptrace in the QNX realtime operating system (RT

operating | realtime | system | ptrace | QNX |

ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes.


Multiple buffer overflows in QNX RTOS 4.25 may

overflows | Multiple | buffer | RTOS | QNX |

Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10.


Untrusted search path vulnerability in the crtt

vulnerability | Untrusted | Neutrino | command | crttrap | search | RTOS | path | QNX |

Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.


The inputtrap utility in QNX RTOS 6.1.0, 6.3, a

inputtrap | utility | RTOS | QNX |

The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.


Format string vulnerability in fontsleuth in QN

vulnerability | fontsleuth | Neutrino | Format | string | RTOS | QNX |

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).


Multiple stack-based buffer overflows in QNX Ne

stack-based | overflows | Neutrino | Multiple | buffer | RTOS | QNX |

Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.


Race condition in phfont in QNX Neutrino RTOS 6

condition | Neutrino | phfont | RTOS | Race | QNX |

Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables.


Multiple buffer overflows in QNX Neutrino RTOS

overflows | Neutrino | Multiple | buffer | RTOS | QNX |

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands.


QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.loca

Neutrino | RTOS | QNX |

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.


Software vulnerabilities results 1 to 15 of 15     
Page: 1