Vulnerabilities > CVE-2004-1028 - Unspecified vulnerability in IBM AIX

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
ibm
NVD
Published: 2005-01-10
Updated: 2017-07-11

Summary

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

Vulnerable Configurations

Part Description Count
OS
Ibm
7

References