EUVD-2004-0826

Malware in sbrugna...

CVE-2004-0828

The CVE-2004-0828 issue affects the ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3. The vulnerability occurs because ctstrtcasd does not properly drop privileges before executing the -f option, enabling local users to modify or create arbitrary files with root privileges. A...

iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability

IBM AIX ctstrtcasd Local File Corruption Vulnerability iDEFENSE Security Advisory 09.27.04 www.idefense.com/application/poi/display?id=144&type=vulnerabilities September 27, 2004 I. BACKGROUND The ctstrtcasd program is a setuid root application, installed by default under newer versions of IBM AI...