NVD

Id
71446  
Name
CVE-2004-1054  
Description
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1054  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369456 71446 CVE-2004-1054 IY64820  View
369457 71446 CVE-2004-1054 IY64852  View
369458 71446 CVE-2004-1054 IY64976  View
369459 71446 CVE-2004-1054 20041220 IBM AIX invscout Local Command Execution Vulnerability  View
369460 71446 CVE-2004-1054 aix-invscout-gain-privileges(18619)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63225 JVNDB-2004-000567 IBM AIX の lsvpd コマンドにおける任意のコードを実行される脆弱性 IBM AIX に含まれる lsvpd コマンドには、利用する外部プログラムを指定する PATH 環境変数の取り扱いが不適切であるため、任意のコードを実行される脆弱性が存在します。 CVE-2004-1054 9481 CVE-2004-1054 71446 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000567.html 2004-12-20 2007-04-01 View