CVE-2005-1528 Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malici...
HighCVSS 7.2
EPSS 0.84%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtos | = 6.2.1 | No fix listed |
References
- 18750 third-party-advisory vendor-advisory
- 1015599 vdb-entry
- 20060207 QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability third-party-advisory vendor-advisory
- 16539 vdb-entry
- ADV-2006-0474 vdb-entry
- qnx-crttrap-privilege-elevation(24560) vdb-entry