CVE-1999-1405

Summary

CVE-1999-1405 is a vulnerability affecting AIX operating systems before version 4.3.2. The snap command creates the /tmp/ibmsupt directory with world-readable permissions, leaving it vulnerable even after the execution of snap -a. Malicious local users can exploit this issue by creating a file called passwd in the /tmp/ibmsupt/general/ directory before root runs snap -a, thus gaining unauthorized access to the shadowed password file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.