CVE-2005-2725

Published: Aug 30, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.

Affected (2)

Products: Qnx: Rtos

Qnx

1 product

Rtos

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Qnx Rtos	Version 6.1.0
Qnx Rtos	Version 6.3.0

References (10)

http://marc.info/?l=bugtraq&m=112490406301882&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16569/

Source: cve@mitre.org

ExploitVendor Advisory

http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/14656

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/21969

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112490406301882&w=2