PT-1999-1582 · Ibm · Aix

Published 1999-12-31 · Updated 2017-10-10 · CVE-1999-1117

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AIX versions 4.1 through 4.2

Description The issue allows local users to read arbitrary files. This is achieved by specifying the file in the -h command line parameter of the lquerypv command.

Recommendations For AIX versions 4.1 and 4.2, consider restricting access to the lquerypv command until a fix is available. As a temporary workaround, avoid using the -h command line parameter with the lquerypv command to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-1999-1117

Affected Products

Aix

References · 8

• 🔥 https://exploit-db.com/exploits/19345 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1117 · Security Note
• http://ciac.llnl.gov/ciac/bulletins/h-13.shtml · Vendor Advisory
• http://marc.info/?l=bugtraq&m=87602167420195&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1752 · Note
• http://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b · Note
• http://securityfocus.com/bid/455 · Note
• http://marc.info/?l=bugtraq&m=87602167420196&w=2 · Note