lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aix | Ibm | 4.1 (including) | 4.1 (including) |
| Aix | Ibm | 4.2 (including) | 4.2 (including) |
References
- http://ciac.llnl.gov/ciac/bulletins/h-13.shtml
- http://marc.info/?l=bugtraq\u0026m=87602167420195\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=87602167420196\u0026w=2
- http://marc.info/?l=bugtraq\u0026w=2\u0026r=1\u0026s=lquerypv\u0026q=b
- http://www.securityfocus.com/bid/455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1752
- http://ciac.llnl.gov/ciac/bulletins/h-13.shtml
- http://marc.info/?l=bugtraq\u0026m=87602167420195\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=87602167420196\u0026w=2
- http://marc.info/?l=bugtraq\u0026w=2\u0026r=1\u0026s=lquerypv\u0026q=b
- http://www.securityfocus.com/bid/455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1752