CVE-1999-1405

High CVSS 10

Published 1999-02-17 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1405, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.

Sources

NVD record for CVE-1999-1405

CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C