The pppoectl utility provided with QNX Momentics 6.4.0 through 6.5.0 SP1 incorrectly has suid permission. This could potentially be used to compromise the security of the system.
The recommended course of action is to remove the suid permission of the binary either in your build file by manually forcing the appropriate permissions or by removing them directly on the target system.
For more information please refer to the following documentation.
NOTE:
This entry has been validated against the SDP version listed above. Use
caution when considering this advice for any other SDP version. For
supported releases, please reach out toQNX Technical Support if you have any questions/concerns.
