QNX 6.1 TimeCreate weakness

From: Pawel Pisarczyk (pawelat_private)
Date: Wed Nov 06 2002 - 07:40:36 PST

Next message: bugzillaat_private: "[Full-Disclosure] [RHSA-2002:197-09] Updated glibc packages fix vulnerabilities in resolver"

Previous message: K. K. Mookhey: "[Full-Disclosure] Weak Password Encryption Scheme in MS SQL Server"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I've found bug in QNX-6.1 timer implementation. After creating
some number (at least 2) of timers with 1 ms tick system hangs.
Please consider attached source code. Code can be executed by
unprivilegged users.


Pawel Pisarczyk
------------------------
IMMOS - IMMOrtal Systems

TEXT/PLAIN attachment: timer-exploit.c

Next message: bugzillaat_private: "[Full-Disclosure] [RHSA-2002:197-09] Updated glibc packages fix vulnerabilities in resolver"
Previous message: K. K. Mookhey: "[Full-Disclosure] Weak Password Encryption Scheme in MS SQL Server"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Nov 06 2002 - 16:35:43 PST