Lucene search
MitreCVE-2004-1028HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1028
2005-01-1005:00:00
mitre
web.nvd.nist.gov
25
cve-2004-1028
untrusted execution path
chcod
aix ibm
vulnerability
local users
arbitrary programs
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0
Percentile
5.1%
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious “grep” program, which is executed from chcod.
Affected configurations
Node
ibmaixMatch5.1
ORibmaixMatch5.1l
ORibmaixMatch5.2
ORibmaixMatch5.2.2
ORibmaixMatch5.2_l
ORibmaixMatch5.3
ORibmaixMatch5.3_l
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | aix | 5.1 | cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:* |
| ibm | aix | 5.1l | cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:* |
| ibm | aix | 5.2 | cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:* |
| ibm | aix | 5.2.2 | cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:* |
| ibm | aix | 5.2_l | cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:* |
| ibm | aix | 5.3 | cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:* |
| ibm | aix | 5.3_l | cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
cvelist
cvelist
CVE-2004-1028
2004-12-22 05:00:00
nvd
nvd
CVE-2004-1028
2005-01-10 05:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2004-1028