QNX RTOS phgrafx特权提升漏洞

QNX realtime operating system (RTOS) 4.25和6.1.0版本中(1) phrafx和(2)phgrafx-startup程序在执行系统命令之前不能正确降低特权。本地用户通过修改PATH环境变量来引用恶意crttrap程序导致执行任意命令。

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

来源: BID
名称: 4916
链接:http://www.securityfocus.com/bid/4916

来源: BID
名称: 4915
链接:http://www.securityfocus.com/bid/4915

来源: XF
名称: qnx-rtos-phgrafx-privileges(9257)
链接:http://www.iss.net/security_center/static/9257.php