PT-2005-2521 · Blackberry · Qnx Neutrino Rtos

Published 2005-12-31 · Updated 2017-07-11 · CVE-2005-1528

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QNX Neutrino RTOS version 6.2.1

Description The issue concerns an untrusted search path vulnerability in the crttrap command. This vulnerability allows local users to load arbitrary libraries by manipulating the LD LIBRARY PATH environment variable to reference a malicious library.

Recommendations For QNX Neutrino RTOS version 6.2.1, as a temporary workaround, consider restricting the use of the LD LIBRARY PATH environment variable to prevent loading malicious libraries until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-1528

Affected Products

Qnx Neutrino Rtos

References · 8

• 🔥 https://exploit-db.com/exploits/27168 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1528 · Security Note
• http://secunia.com/advisories/18750 · Vendor Advisory
• http://idefense.com/intelligence/vulnerabilities/display.php?id=379 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24560 · Note
• http://vupen.com/english/advisories/2006/0474 · Note
• http://securityfocus.com/bid/16539 · Note
• http://securitytracker.com/id?1015599 · Note