## Description

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### sgi - irix

Affected Versions:

- 6.2

### sgi - irix

Affected Versions:

- 6.4

### sgi - irix

Affected Versions:

- 6.5

### sgi - irix

Affected Versions:

- 6.5.1

### netbsd - netbsd

Affected Versions:

- *

### netbsd - netbsd

Affected Versions:

- 1.0

### netbsd - netbsd

Affected Versions:

- 1.1

### netbsd - netbsd

Affected Versions:

- 1.2

### netbsd - netbsd

Affected Versions:

- 1.2.1

### netbsd - netbsd

Affected Versions:

- 1.3

### netbsd - netbsd

Affected Versions:

- 1.3.1

## References

- ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc
- http://marc.info/?l=bugtraq&m=90233906612929&w=2
- http://www.iss.net/security_center/static/7577.php
- http://www.securityfocus.com/bid/331
  Exploit Patch Vendor Advisory
- http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html
  Patch Vendor Advisory
- ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc
- http://marc.info/?l=bugtraq&m=90233906612929&w=2
- http://www.iss.net/security_center/static/7577.php
- http://www.securityfocus.com/bid/331
  Exploit Patch Vendor Advisory
- http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html
  Patch Vendor Advisory

Neural Processor Active