CVEvulnerability

CVE-1999-1405

10.0 HIGH Published 1999-02-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-02-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.

Affected configurations

• ibm aix 3.2.5 • ibm aix 4.1 • ibm aix 4.1.2 • ibm aix 4.1.3 • ibm aix 4.1.4 • ibm aix 4.1.5 • ibm aix 4.2 • ibm aix 4.2.1

References