QNX Neutrino RTOS 'LD_DEBUG_OUTPUT' Local Privilege Escalation Vulnerability

Bugtraq ID:	46838
Class:	Design Error
CVE:	CVE-2011-4060
Remote:	No
Local:	Yes
Published:	Mar 11 2011 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	Tim Brown
Vulnerable:	QNX RTOS 6.4.2 QNX RTOS 6.4.1 QNX RTOS 6.4 QNX RTOS 6.3.2 QNX RTOS 6.3 QNX RTOS 6.2.1 QNX RTOS 6.2 Update Patch A QNX RTOS 6.2 QNX RTOS 6.1 QNX RTOS 2.4 QNX RTOS 6.3.0 SP3 QNX RTOS 4.25 QNX RTOS 0
Not Vulnerable:

QNX Neutrino RTOS 'LD_DEBUG_OUTPUT' Local Privilege Escalation Vulnerability

QNX Neutrino RTOS is prone to a local privilege-escalation vulnerability.

Local attackers may exploit this issue to gain elevated privileges, which may lead to a complete compromise of an affected computer.

QNX Neutrino RTOS 'LD_DEBUG_OUTPUT' Local Privilege Escalation Vulnerability

Attackers can use readily available utilities to exploit this issue.

QNX Neutrino RTOS 'LD_DEBUG_OUTPUT' Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

QNX Neutrino RTOS 'LD_DEBUG_OUTPUT' Local Privilege Escalation Vulnerability

References:

• QNX Homepage (QNX Software Systems Ltd.)
  
• Medium severity flaw in QNX Neutrino RTOS (Tim Brown)