First published: Fri Jul 27 2001(Updated: )
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Qnx Qnx | =2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0624 has a moderate severity level due to its impact on file access controls.
To fix CVE-2001-0624, restrict access to the mount point for the FAT disk partition or upgrade to a more secure version of QNX.
QNX version 2.4 is the only known affected version related to CVE-2001-0624.
CVE-2001-0624 is a local privilege escalation vulnerability allowing unauthorized file access.
CVE-2001-0624 requires local access, so it cannot be exploited remotely.