Description
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
References
- qnx-ftp-quote-format-string(17347) vdb-entry
- 20040913 [RLSA_03-2004] QNX ftp client format string bug mailing-list
- http://www.rfdslabs.com.br/qnx-advs-04-2004.txt
- 12533 third-party-advisory