CoreCVE
Back

HIGH

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a

Published Sep 12, 2001

Description

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 12, 2001
Updated Aug 1, 2024
Reserved Aug 31, 2001
Link CVE-1999-1405
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-1999-1405
Red Hat
Severity n/a
Public date n/a
Links CVE-1999-1405
ENISA EUVD
Assigner mitre
Published Sep 12, 2001
Updated Aug 1, 2024
Exploited since n/a
Link EUVD-1999-1386
EUVD-1999-1386