CVE-2004-1028: High severity IBM AIX vulnerability
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1028?
CVE-2004-1028 is considered to be a high severity vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2004-1028?
To mitigate CVE-2004-1028, it's recommended to restrict user permissions and review the PATH environment variable settings.
Who is affected by CVE-2004-1028?
CVE-2004-1028 primarily affects local users on IBM AIX versions 5.1, 5.2, and 5.3.
What causes the CVE-2004-1028 vulnerability?
The vulnerability in CVE-2004-1028 is caused by the chcod command using an untrusted execution path that allows manipulation of the PATH variable.
Can CVE-2004-1028 be exploited remotely?
CVE-2004-1028 cannot be exploited remotely as it requires local access to the affected systems.