CVE-2002-2040

This exploit leverages a privilege escalation vulnerability in the QNX phgrafx-startup utility due to unsafe use of the system() function. It creates a malicious crttrap script in /tmp, modifies the PATH to prioritize it, and triggers phgrafx-startup to execute the script with elevated privileges, resulting in a setuid root shell.

This exploit leverages a privilege escalation vulnerability in the QNX phgrafx utility by hijacking the PATH environment variable to execute a malicious script (crttrap) with root privileges. The script creates a setuid root shell in /tmp/badc0ded.