lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.
References
Configurations
Information
Published : 2005-02-09 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-0261
Mitre link : CVE-2005-0261
JSON object : View
CWE
Products Affected
ibm
- aix