PT-1998-1229 · Ibm · Aix

Published 1998-06-11 · Updated 2008-09-05 · CVE-1999-1480

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AIX version 4.3

Description The issue allows local users to create or modify files via a symlink attack, exploiting the acledit and aclput functions in AIX.

Recommendations For AIX version 4.3, consider restricting access to the acledit and aclput functions to minimize the risk of exploitation. As a temporary workaround, limit the ability of local users to create or modify files using these functions until a patch is available.

Fix

Related Identifiers

CVE-1999-1480

Affected Products

Aix

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1480 · Security Note
• http://securityfocus.com/bid/429 · Vendor Advisory