Vulnerabilities > QNX > Rtos > Low

DATE CVE VULNERABILITY TITLE RISK
2005-08-30 CVE-2005-2725 Local Arbitrary File Disclosure vulnerability in QNX RTOS InputTrap
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
local
low complexity
qnx
2.1
2004-09-13 CVE-2004-1683 Local Command Execution vulnerability in QNX CRTTrap Path Environment Variable
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap.
local
high complexity
qnx
3.7
2002-12-31 CVE-2002-1983 Local Denial of Service vulnerability in QNX Rtos 6.1.0
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick.
local
low complexity
qnx
2.1
2002-12-31 CVE-2002-2039 Unspecified vulnerability in QNX Rtos 4.25/6.1.0
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal.
local
low complexity
qnx
2.1