.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack. NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-1486","sourceIdentifier":"cve@mitre.org","published":"1998-02-25T05:00:00.000","lastModified":"2026-06-16T21:50:32.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/408","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7675","source":"cve@mitre.org"},{"url":"http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},