CVE-2002-0793

source: wwwsecurityfocuscom/bid/4901/info The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file crttrap is installed setuid by default crttrap Local attackers may specify an arbitrary system file in place of the configuration file and crttrap will disclose the contents of the arbitrary file cr ...

source: wwwsecurityfocuscom/bid/4904/info When creating memory dump files, the QNX RTOS debugging utility 'dumper' follows symbolic links It also sets ownership of the file to the userid of the terminated process It is possible for malicious local attackers to exploit this vulnerability to overwrite and gain ownership of arbitrary files ...

source: wwwsecurityfocuscom/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files (such as /etc/passwd) monitor is installed setuid root by default The monitor -f command line option may be used by a local attacker to cause an arbitrary system file to be overwri ...