5 lines
No EOL
374 B
Text
5 lines
No EOL
374 B
Text
source: http://www.securityfocus.com/bid/4901/info
|
|
|
|
The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file. crttrap is installed setuid by default. crttrap Local attackers may specify an arbitrary system file in place of the configuration file and crttrap will disclose the contents of the arbitrary file.
|
|
|
|
crttrap -c /etc/shadow |