Description
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.
References
- http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
- 11105 vdb-entry
- 9661 vdb-entry
- qnx-rtp-mount-command-execute(17284) vdb-entry
- 20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities mailing-list
- VU#577566 third-party-advisory