The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
1998-07-03T04:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 2.1 (LOW)
AV:L/AC:L/Au:N/C:P/I:N/A:N
3.9
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | sgi | irix | 6.2 | Yes |
Operating System | sgi | irix | 6.4 | Yes |
Operating System | sgi | irix | 6.5 | Yes |
Operating System | sgi | irix | 6.5.1 | Yes |
Operating System | netbsd | netbsd | ≤ 1.3.2 | Yes |
Operating System | netbsd | netbsd | 1.0 | Yes |
Operating System | netbsd | netbsd | 1.1 | Yes |
Operating System | netbsd | netbsd | 1.2 | Yes |
Operating System | netbsd | netbsd | 1.2.1 | Yes |
Operating System | netbsd | netbsd | 1.3 | Yes |
Operating System | netbsd | netbsd | 1.3.1 | Yes |