iDefense Security Advisory 02.07.06 – Local exploitation of a buffer overflow in QNX Neutrino RTOS’s (QNX) ‘su’ command allows attackers to gain root privileges. The problem specifically exists in the parsing of a long string passed as the first argument to the set user id (setuid) binary ‘su’. iDefense has confirmed the existence of these vulnerabilities in QNX Neutrino RTOS version 6.2.0. Earlier versions are suspected to be susceptible to exploitation as well.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43650/02.07.06-4.txt
Source: https://packetstormsecurity.com/files/43650/iDEFENSE-Security-Advisory-2006-02-07.4.html