Vulnerabilities > CVE-2006-0623 - Local Privilege Escalation and Denial Of Service vulnerability in QNX Rtos 6.3.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
qnx
exploit available
NVD
Published: 2006-02-09
Updated: 2017-07-20

Summary

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.

Vulnerable Configurations

Part Description Count
Application
Qnx
1

Exploit-Db

descriptionQNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit. CVE-2006-0623. Local exploit for qnx platform
idEDB-ID:1481
last seen2016-01-31
modified2006-02-08
published2006-02-08
reporterkokanin
sourcehttps://www.exploit-db.com/download/1481/
titleQNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit

References