QNX RTOS 2.4 - File Disclosure

EDB-ID:

22212

CVE:

N/A




Platform:

Linux

Date:

2001-04-21


source: https://www.securityfocus.com/bid/6751/info

A vulnerability has been discovered in QNX Real-Time Operating System. It has been reported that an unauthorized user may access arbitrary files. This is possible by requesting the file through the location that the FAT partition is mounted to. Accessing files in this manner ignores all permissions set by the operating system.

example: cat /fs-dos/linux/etc/shadow