Vulnerabilities > CVE-2006-0623 - Unspecified vulnerability in QNX Rtos 6.3.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
qnx
exploit available

Summary

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.

Vulnerable Configurations

Part Description Count
Application
Qnx
1

Exploit-Db

descriptionQNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit. CVE-2006-0623. Local exploit for qnx platform
idEDB-ID:1481
last seen2016-01-31
modified2006-02-08
published2006-02-08
reporterkokanin
sourcehttps://www.exploit-db.com/download/1481/
titleQNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit