critical10.0Public exploit code
CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation1999-02-17 · local · aix · Verified
Impact
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aix | Versions 3.2.5, 4.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5 |