CVE-1999-1486: IBM Aix

Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days.

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.

Affected products

• IBM Aix: version 4.1 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; version 4.1.5 only; …

Published 1998-02-25. Last modified 2026-06-16.