Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0623. PoCs published by kokanin.
AI-analyzed exploit summary This exploit targets a vulnerability in QNX 6.3.0 by leveraging a writable /etc/rc.d/rc.local file to inject a malicious payload. It compiles a C program that spawns a root shell and ensures persistence by adding it to rc.local, then crashes the system via gdb to trigger the payload.
Description
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.
Exploits (1)
This exploit targets a vulnerability in QNX 6.3.0 by leveraging a writable /etc/rc.d/rc.local file to inject a malicious payload. It compiles a C program that spawns a root shell and ensures persistence by adding it to rc.local, then crashes the system via gdb to trigger the payload.