CVE-2011-4060: Qnx Neutrino Rtos

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack.

Affected products

• Qnx Neutrino Rtos: version 6.5.0 only

Published 2011-10-18. Last modified 2026-06-16.