CVE Vulnerabilities

CVE-1999-1486

Published: Feb 25, 1998 | Modified: Oct 10, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
1.2 LOW
AV:L/AC:H/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.

Affected Software

Name Vendor Start Version End Version
Aix Ibm 4.1 (including) 4.1 (including)
Aix Ibm 4.1.1 (including) 4.1.1 (including)
Aix Ibm 4.1.2 (including) 4.1.2 (including)
Aix Ibm 4.1.3 (including) 4.1.3 (including)
Aix Ibm 4.1.4 (including) 4.1.4 (including)
Aix Ibm 4.1.5 (including) 4.1.5 (including)
Aix Ibm 4.2 (including) 4.2 (including)
Aix Ibm 4.2.1 (including) 4.2.1 (including)
Aix Ibm 4.3 (including) 4.3 (including)

References