CVE-2005-2725

Опубликовано: 30 авг. 2005

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.

Ссылки

http://marc.info/?l=bugtraq&m=112490406301882&w=2
http://secunia.com/advisories/16569/
Exploit
Vendor Advisory
http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14656
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21969
http://marc.info/?l=bugtraq&m=112490406301882&w=2
http://secunia.com/advisories/16569/
Exploit
Vendor Advisory
http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14656
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21969

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00133

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hvv7-rwc6-4777

github

почти 4 года назад