CVEvulnerability
CVE-1999-1409
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 1998-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
Affected configurations
• sgi irix 6.2
• sgi irix 6.4
• sgi irix 6.5
• sgi irix 6.5.1
• netbsd netbsd (<= 1.3.2)
• netbsd netbsd 1.0
• netbsd netbsd 1.1
• netbsd netbsd 1.2
• netbsd netbsd 1.2.1
• netbsd netbsd 1.3
• netbsd netbsd 1.3.1
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc ftp.NetBSD.ORG
- http://marc.info/?l=bugtraq&m=90233906612929&w=2 marc.info
- http://www.iss.net/security_center/static/7577.php www.iss.net
- http://www.securityfocus.com/bid/331 Exploit, Patch, Vendor Advisory
- http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html Patch, Vendor Advisory
- ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc ftp.NetBSD.ORG
- http://marc.info/?l=bugtraq&m=90233906612929&w=2 marc.info
- http://www.iss.net/security_center/static/7577.php www.iss.net
- http://www.securityfocus.com/bid/331 Exploit, Patch, Vendor Advisory
- http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html Patch, Vendor Advisory