CVE-1999-1405: IBM Aix

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.

Affected products

• IBM Aix: version 3.2.5 only; version 4.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; version 4.1.5 only; …

Published 1999-02-17. Last modified 2026-06-16.