Multiple buffer overflows in (1) phrelay-cfg (2) phlocale (3) pkg-installer or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.