Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QNX RTOS应用程序packager执行外部程序路径不正确漏洞
Vulnerability Description
QNX RTOS是一款设计用于嵌入系统的实时操作系统，由QNX分发和维护。 QNX中的packager应用程序执行外部应用程序时处理路径不正确，本地攻击者可以利用这个漏洞欺骗程序运行一个木马程序，导致获得ROOT SHELL控制整个系统。 以setuid root属性安装的packager在执行外部应用程序时没有使用绝对路径，本地攻击者可以利用这个漏洞诱使packager执行一个恶意程序，而导致控制整个系统。
CVSS Information
N/A
Vulnerability Type
N/A