← Back

CVE-2004-1028

nvd nist
Published: Jan 10, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

Affected (7)

Products: Ibm: Aix
Ibm
1 product
Aix
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Aix
Version 5.1
Aix
Version 5.1l
Aix
Version 5.2.2
Aix
Version 5.2
Aix
Version 5.2_l
Aix
Version 5.3
Aix
Version 5.3_l

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.