Info

Disclosure

Feb 07, 2006

Discovery

Dec 23, 2004

Dates

Exploit

Unknown

Solution

Unknown

Description

QNX Neutrino RTOS contains a flaw that may allow a local denial of service. The issue is triggered when a local user sends a crafted break signal (0xb032d59) to the gdb utility, and will result in loss of availability for the system.

Classification

Location: Local Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Public

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: restrict access to the gdb utility

Products

QNX Software Systems

QNX Neutrino RTOS

6.3.0

References

Security Tracker: 1015598
Secunia Advisory ID: 18750
CVE ID: 2006-0622 (see also: NVD)
ISS X-Force ID: 24553
VUPEN Advisory: ADV-2006-0474
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0121.html
Other Advisory URL: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386
Vendor URL: http://www.qnx.com/products/rtos/

Credit

iDefense - iDefense

Direct URL: http://osvdb.org/22960