PT-2005-2521 · Blackberry · Qnx Neutrino Rtos

Publicado 2005-12-31 · Atualizado 2017-07-11 · CVE-2005-1528

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QNX Neutrino RTOS version 6.2.1

Description The issue concerns an untrusted search path vulnerability in the crttrap command. This vulnerability allows local users to load arbitrary libraries by manipulating the LD LIBRARY PATH environment variable to reference a malicious library.

Recommendations For QNX Neutrino RTOS version 6.2.1, as a temporary workaround, consider restricting the use of the LD LIBRARY PATH environment variable to prevent loading malicious libraries until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-1528

Produtos afetados

Qnx Neutrino Rtos

Referências · 8

• 🔥 https://exploit-db.com/exploits/27168 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24560 · Nota
• http://vupen.com/english/advisories/2006/0474 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1528 · Nota de Segurança
• http://secunia.com/advisories/18750 · Aviso do Fabricante
• http://securityfocus.com/bid/16539 · Nota
• http://idefense.com/intelligence/vulnerabilities/display.php?id=379 · Aviso do Fabricante
• http://securitytracker.com/id?1015599 · Nota