{"uuid": "28c75cf7-5c96-462b-8ca3-c2122f6bf027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-2533", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/qnx/local/ifwatchd_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd\", \"author\": [\"cenobyte\", \"Tim Brown\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to gain root privileges on QNX 6.4.x and 6.5.x\\n          systems by exploiting the ifwatchd suid executable.\\n\\n          ifwatchd allows users to specify scripts to execute using the '-A'\\n          command line argument; however, it does not drop privileges when\\n          executing user-supplied scripts, resulting in execution of arbitrary\\n          commands as root.\\n\\n          This module has been tested successfully on QNX Neutrino 6.5.0 (x86)\\n          and 6.5.0 SP1 (x86).\", \"disclosure_date\": \"2014-03-10\", \"fullname\": \"exploit/qnx/local/ifwatchd_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2023-02-02 18:17:02 +0000\", \"name\": \"ifwatchd Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/qnx/local/ifwatchd_priv_esc.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"qnx/local/ifwatchd_priv_esc\", \"references\": [\"CVE-2014-2533\", \"BID-66449\", \"EDB-32153\", \"URL-http://seclists.org/bugtraq/2014/Mar/66\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:32.762107Z"}