OSVDB ID: 22966 Title: QNX Neutrino RTOS fontsleuth Local Format String |
Info |
|
|
Dates |
||||
|
|
Description |
QNX Neutrino RTOS contains a flaw that may allow a local user to gain privileges. The issue is due to the fontsleuth program not sanitizing user-supplied input to the zeroth argument. By passing format specifiers such as %n and %hn, it is possible to overwrite portions of memory to run code under high privileges. |
Classification |
Location:
Local Access Required,
Local / Remote,
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Rumored |
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: remove the SUID bit from the binary or restrict access via group/permission control |
Products |
|
References |
|
Credit |
|