Exploit QNX Photon pkg-installer - '-s' Overflow

[Exploiter]

EDB-ID

24596

Проверка EDB

1. Пройдено

Автор

JULIO CESAR FORT

Тип уязвимости

DOS

Платформа

UNIX

CVE

cve-2004-1681

Дата публикации

2004-09-13

QNX Photon pkg-installer - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info
  
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
  
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

$ /usr/photon/bin/pkg-installer -s AAAAA[...]