CVE-1999-1480
CVSS 2.0 Score 1.2 of 10 (low)
Details
Published Jun 11, 1998
Updated: Nov 20, 2024
Summary
CVE-1999-1480 is a vulnerability affecting the acledit and aclput utilities in AIX 4.3. It allows local users to create or modify files through a symlink attack. By creating a symbolic link to a file with writable permissions, an attacker can manipulate the targeted file, leading to potential data corruption or unauthorized access. This issue poses a significant security risk, as it can be exploited without requiring elevated privileges. It is essential for AIX 4.3 users to apply the available patch to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- IBM AIX
Affected Vendors
- IBM Corporation