CVE-2004-1329: High severity IBM AIX vulnerability
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diagexec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1329?
CVE-2004-1329 is considered a high severity vulnerability due to the potential for local users to execute arbitrary programs on affected AIX systems.
How do I fix CVE-2004-1329?
To fix CVE-2004-1329, you should update your AIX system to the latest available patches that address this vulnerability.
What systems are affected by CVE-2004-1329?
CVE-2004-1329 affects IBM AIX versions 5.1, 5.2, and 5.3.
What is the impact of exploiting CVE-2004-1329?
Exploiting CVE-2004-1329 allows local users to gain elevated privileges by executing unauthorized commands, potentially compromising the system.
Who is vulnerable to CVE-2004-1329?
Local users on IBM AIX systems running versions 5.1, 5.2, or 5.3 are vulnerable to CVE-2004-1329.