CVE-2004-1681
QNX Photon microGUI for QNX RTP 6.1 - Local Privilege Escalation via Long Server Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-1681. PoCs published by Julio Cesar Fort.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow vulnerability in QNX Photon MicroGUI's pkg-installer utility. By supplying an overly long string to the -s parameter, an attacker can trigger a buffer overflow, potentially leading to arbitrary code execution.
Description
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.
Exploits (4)
The exploit demonstrates a buffer overflow vulnerability in QNX Photon MicroGUI's pkg-installer utility. By supplying an overly long string to the -s parameter, an attacker can trigger a buffer overflow, potentially leading to arbitrary code execution.
The provided text describes a buffer overflow vulnerability in QNX Photon MicroGUI utilities, specifically mentioning the `phrelay-cfg` command. It lacks executable exploit code but outlines the vulnerability and potential impact.
The exploit demonstrates a buffer overflow vulnerability in QNX Photon MicroGUI utilities, specifically targeting the 'phlocale' binary. The PoC shows a command-line injection with a long string of 'A's, which can lead to arbitrary code execution due to improper input validation.
The exploit demonstrates a buffer overflow vulnerability in QNX Photon MicroGUI utilities, specifically targeting the 'input-cfg' binary. The vulnerability arises from insufficient validation of user-supplied input lengths, allowing arbitrary code execution in the context of the vulnerable setuid applications.