PT-1999-1582 · Ibm · Aix

Publicado 1999-12-31 · Atualizado 2017-10-10 · CVE-1999-1117

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AIX versions 4.1 through 4.2

Description The issue allows local users to read arbitrary files. This is achieved by specifying the file in the -h command line parameter of the lquerypv command.

Recommendations For AIX versions 4.1 and 4.2, consider restricting access to the lquerypv command until a fix is available. As a temporary workaround, avoid using the -h command line parameter with the lquerypv command to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-1999-1117

Produtos afetados

Aix

Referências · 8

• 🔥 https://exploit-db.com/exploits/19345 · Exploit
• http://marc.info/?l=bugtraq&m=87602167420195&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1752 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1117 · Nota de Segurança
• http://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b · Nota
• http://securityfocus.com/bid/455 · Nota
• http://ciac.llnl.gov/ciac/bulletins/h-13.shtml · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=87602167420196&w=2 · Nota