high7.2Public exploit code
CVE-2006-0623
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at sys…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QNX RTOS 6.3.0 - Insecure 'rc.local' Permissions System Crash / Privilege Escalation2006-02-08 · local · qnx · Verified
Impact
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnx | Rtos | Version 6.3.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18750
- http://securitytracker.com/id?1015598
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387
- http://www.osvdb.org/22958
- http://www.securityfocus.com/bid/16539
- http://www.vupen.com/english/advisories/2006/0474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24552
- http://secunia.com/advisories/18750
- http://securitytracker.com/id?1015598
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387
- http://www.osvdb.org/22958
- http://www.securityfocus.com/bid/16539
- http://www.vupen.com/english/advisories/2006/0474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24552