Vulnerability Details CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.075
EPSS Ranking 91.4%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-1999-1405
-
cpe:2.3:o:ibm:aix:3.2.5
-
cpe:2.3:o:ibm:aix:4.1
-
cpe:2.3:o:ibm:aix:4.1.2
-
cpe:2.3:o:ibm:aix:4.1.3
-
cpe:2.3:o:ibm:aix:4.1.4
-
cpe:2.3:o:ibm:aix:4.1.5
-
cpe:2.3:o:ibm:aix:4.2
-
cpe:2.3:o:ibm:aix:4.2.1