CVE-2005-2725 The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
LowCVSS 2.1
EPSS 0.83%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtos | = 6.1.0 | No fix listed |
| qnx rtos | = 6.3.0 | No fix listed |
References
- 20050824 [RLSA_01-2005] QNX inputtrap arbitrary file read vulnerability mailing-list
- 16569 exploit third-party-advisory vendor-advisory
- www.rfdslabs.com.br exploit vendor-advisory
- 14656 exploit vdb-entry
- qnx-inputtrap-obtain-information(21969) vdb-entry