QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
BID:14656
Info
QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
| Bugtraq ID: | 14656 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 24 2005 12:00AM |
| Updated: | Aug 24 2005 12:00AM |
| Credit: | Julio Cesar Fort <[email protected]> discovered this vulnerability. |
| Vulnerable: |
QNX RTOS 6.3 QNX RTOS 6.1 |
| Not Vulnerable: | |
Discussion
QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions.
This vulnerability allows local malicious users to gain access to the contents of arbitrary files with superuser privileges, aiding them in further attacks.
QNX RTOS versions 6.1 and 6.3 are affected by this issue. Other versions are also likely affected. This issue is similar to the one described in BID 4901.
QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions.
This vulnerability allows local malicious users to gain access to the contents of arbitrary files with superuser privileges, aiding them in further attacks.
QNX RTOS versions 6.1 and 6.3 are affected by this issue. Other versions are also likely affected. This issue is similar to the one described in BID 4901.
Exploit / POC
QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
An exploit is not required. An example command sufficient to gain access to /etc/shadow was provided:
inputtrap -t /etc/shadow start
An exploit is not required. An example command sufficient to gain access to /etc/shadow was provided:
inputtrap -t /etc/shadow start
Solution / Fix
QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
QNX RTOS InputTrap Local Arbitrary File Disclosure Vulnerability
References:
References:
- QNX Homepage (QNX Software Systems Ltd.)
- [RLSA_01-2005] QNX inputtrap arbitrary file read vulnerability ([email protected])