Approved changes feed: RSS · Atom

cpe:2.3:o:qnx:neutrino_rtos:6.5.0:*:*:*:*:*:*:*

part: o version: 6.5.0 update: *

VendorQnx (573ef8a6-c4fa-5149-9485-c446617dc37f)
ProductNeutrino Rtos (136e9c2f-3902-5834-8399-ddb131a7004a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4060 vulnerable 2026-06-08 04:59:28.900885 Details available
The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack.
Published: 2011-10-18T01:00:00.000Z
Updated: 2024-08-06T23:53:32.676Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.