CVE-1999-1405 | BDVDB-2026-2825 Detail

Description#

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12001-09-12Record published in the CVE List.
2. Version 22024-08-01Most recent update recorded in the CVE List.