CVE-1999-1117: Low severity IBM AIX vulnerability
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
AIX/lquerypvfrom your environment.Uninstall or remove the lquerypv binary from systems where it is not required to eliminate the ability for local users to read arbitrary files via the -h parameter.
- Configuration
Prevent non-privileged local users from executing lquerypv (for example, change ownership to root and remove world/group execute bits: chmod 0750 or 0700, or move the binary out of path accessible to untrusted users).
AIX lquerypv binary execute_permission_for_non-privileged_users = disabled - Compensating control
Restrict which local accounts can access affected systems and execute administrative utilities: limit shell/login access to trusted administrators, apply host-level access controls or ACLs to prevent untrusted local users from running lquerypv.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1117?
CVE-1999-1117 is considered a high severity vulnerability due to its potential for local users to read arbitrary files.
How do I fix CVE-1999-1117?
To fix CVE-1999-1117, it is recommended to upgrade to a patched version of AIX that resolves this vulnerability.
Who is affected by CVE-1999-1117?
CVE-1999-1117 affects local users on systems running AIX versions 4.1 and 4.2.
What impact does CVE-1999-1117 have?
The impact of CVE-1999-1117 allows local users to gain unauthorized access to sensitive information by reading arbitrary files.
Can CVE-1999-1117 be exploited remotely?
CVE-1999-1117 is not remotely exploitable as it requires local access to the affected systems.