CVE-2004-0828: Low severity IBM AIX vulnerability
Published Sep 28, 2004
·Updated
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.
Affected Software
2 affected components
IBM AIX=5.3
IBM AIX=5.2
Event History
Sep 28, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0828?
CVE-2004-0828 is considered a medium severity vulnerability due to its potential risk of local file modification.
2
How do I fix CVE-2004-0828?
To mitigate CVE-2004-0828, it's advised to upgrade to a newer version of RSCT that properly handles privilege dropping.
3
Who is affected by CVE-2004-0828?
CVE-2004-0828 primarily affects users of RSCT versions 2.3.0.0 and earlier running on IBM AIX 5.2 and 5.3.
4
What type of vulnerability is CVE-2004-0828 classified as?
CVE-2004-0828 is classified as a local privilege escalation vulnerability.
5
What can attackers do with CVE-2004-0828?
Attackers can exploit CVE-2004-0828 to modify or create arbitrary files on the affected system.