Skip to content
OpenAdvisories
Unscored CVE-2004-2388 EUVD-2004-2379GHSA-mg3x-w99j-gv68

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be ove…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.

References