Unscored CVE-2004-1028 EUVD-2004-1026GHSA-32xx-934q-wgcw

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modi…

Published Dec 22, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

References

aix-chcod-gain-privileges(18625) vdb-entry
20041220 IBM AIX chcod Local Privilege Escalation Vulnerability third-party-advisory
IY64355 vendor-advisory
IY64356 vendor-advisory
IY64354 vendor-advisory