CVE-2011-4060 The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, whic...
LowCVSS 3.3
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx neutrino rtos | = 6.5.0 | No fix listed |
References
- 8475 third-party-advisory
- www.nth-dimension.org.uk
- 71784 vdb-entry
- www.qnx.com
- www.qnx.com
- 20110311 Medium severity flaw in QNX Neutrino RTOS mailing-list
- 20110629 Breaking the links: Exploiting the linker mailing-list
- 46838 vdb-entry