CVE-2004-1390

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html
• kb.cert.org/vuls/id/961686 · Third Party Advisory
• rfdslabs.com.br/qnx-advs-01-2004.txt
• securityfocus.com/bid/11104 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/17280

rtos のその他の脆弱性

• CVE-2006-0623高 7.2QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute ar…
• CVE-2006-0622中 4.9QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb.
• CVE-2006-0621高 7.2Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or …
• CVE-2006-0620中 6.2Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT…
• CVE-2006-0619中 4.6Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABL…