Description
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap.
References
- qnx-rtp-crttrap-race-condition(17345) vdb-entry
- 20040913 [RLSA_04-2004] QNX crrtrap possible race condition vulnerability mailing-list
- 11165 vdb-entry