PT-1998-1207 · Netbsd · At

Published 1998-07-03 · Updated 2016-10-18 · CVE-1999-1409

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions at program in IRIX version 6.2 at program in NetBSD versions 1.3.2 and earlier

Description The issue allows local users to read portions of arbitrary files by submitting the file to at with the -f argument. This generates error messages that at sends to the user via e-mail.

Recommendations For IRIX version 6.2, consider restricting access to the at program to minimize the risk of exploitation. For NetBSD versions 1.3.2 and earlier, consider disabling the at program until a fix is available. As a temporary workaround, avoid using the -f argument in the at program to prevent the generation of error messages that could reveal sensitive information.

Exploit

Fix

Related Identifiers

CVE-1999-1409

Affected Products

At

References · 7

• 🔥 https://exploit-db.com/exploits/19261 · Exploit
• 🔥 http://securityfocus.com/bid/331 · Exploit
• http://shmoo.com/mail/bugtraq/jul98/msg00064.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1409 · Security Note
• http://marc.info/?l=bugtraq&m=90233906612929&w=2 · Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc · Note
• http://iss.net/security_center/static/7577.php · Note