Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QNX RTOS phgrafx特权提升漏洞
Vulnerability Description
QNX realtime operating system (RTOS) 4.25和6.1.0版本中(1) phrafx和(2)phgrafx-startup程序在执行系统命令之前不能正确降低特权。本地用户通过修改PATH环境变量来引用恶意crttrap程序导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A