CVE

Id
9757  
CVE No.
CVE-2004-1329  
Status
Candidate  
Description
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.  
Phase
Assigned (20050106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66265 9757 CVE-2004-1329 BUGTRAQ:20041220 AIX 5.1/5.2/5.3 local root exploits  View
66266 9757 CVE-2004-1329 URL:http://marc.info/?l=bugtraq&m=110355931920123&w=2  View
66267 9757 CVE-2004-1329 BUGTRAQ:20070330 AIX 4.3 lsmcode local root command execution  View
66268 9757 CVE-2004-1329 URL:http://www.securityfocus.com/archive/1/archive/1/464276/100/0/threaded  View
66269 9757 CVE-2004-1329 BUGTRAQ:20070402 Re: AIX 4.3 lsmcode local root command execution  View
66270 9757 CVE-2004-1329 URL:http://www.securityfocus.com/archive/1/archive/1/464481/100/0/threaded  View
66271 9757 CVE-2004-1329 MILW0RM:701  View
66272 9757 CVE-2004-1329 URL:http://milw0rm.com/exploits/701  View
66273 9757 CVE-2004-1329 AIXAPAR:IY64389  View
66274 9757 CVE-2004-1329 URL:http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only  View
66275 9757 CVE-2004-1329 AIXAPAR:IY64277  View
66276 9757 CVE-2004-1329 URL:http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only  View
66277 9757 CVE-2004-1329 BID:12041  View
66278 9757 CVE-2004-1329 URL:http://www.securityfocus.com/bid/12041  View
66279 9757 CVE-2004-1329 XF:aix-diagnostics-gain-privileges(18620)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63229 JVNDB-2004-000571 IBM AIX の paginit コマンドにおけるバッファオーバーフローの脆弱性 IBM AIX に含まれる paginit コマンドには、第一引数に指定するユーザ名の妥当性の確認に不備が存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-1330 9757 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000571.html  View