>> QNX Realtime Operating System Local Buffer Overflow Vulnerability
Title : QNX Realtime Operating System Local Buffer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2005-2669 CVE ID : GENERIC-MAP-NOMATCH
Rated as : Moderate Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2005-11-30
Technical Description
A vulnerability has been identified in QNX Realtime Operating System (RTOS), which could be exploited by local attackers to execute arbitrary commands with elevated privileges. This flaw is due to a buffer overflow error in the suid root "phgrafx" utility that does not properly handle overly long arguments, which could be exploited by malicious users to execute arbitrary code with "root" privileges.
