Unscored CVE-2004-0828 EUVD-2004-0826GHSA-v74f-r59m-cjv4

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option,…

Published Sep 28, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.

References

1011429 vdb-entry
ctstrtcasd-file-overwrite(17514) vdb-entry
11264 vdb-entry
12664 third-party-advisory