Unscored severity · published Feb 25, 1998
CVE-1999-1486
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack
–
CVSS
0.3%
EPSS
No
On KEV
Description
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
4.1; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1486
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1486
techsupport.services.ibm.com
http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only
Patch
http://www.securityfocus.com/bid/408
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7675
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS