Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QNX RTOS CRTTrap存在文件泄露漏洞
Vulnerability Description
QNX RTOS是一款嵌入式的可灵活裁剪的实时操作系统。 QNX RTOS中的'crttrap'工具存在漏洞，可导致本地攻击者查看系统任意文件内容。 QNX RTOS中的'crttrap'以setuid root方式默认安装，其中存在-c命令行参数可指定配置文件，由于对指定查看的文件缺少正确的访问控制，可导致本地攻击者使用-c命令行参数查看系统任意敏感文件，包括/etc/shadow。
CVSS Information
N/A
Vulnerability Type
N/A