CVE-1999-1405
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
Affected Platforms (CPE)
💻
Ibm
Aix
= 3.2.5💻
Ibm
Aix
= 4.1💻
Ibm
Aix
= 4.1.2💻
Ibm
Aix
= 4.1.3💻
Ibm
Aix
= 4.1.4💻
Ibm
Aix
= 4.1.5💻
Ibm
Aix
= 4.2💻
Ibm