NVD

Id
71709  
Name
CVE-2004-1329  
Description
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-20  
Modified Date
2017-07-10  
Seq
2004-1329  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370770 71709 CVE-2004-1329 20041220 AIX 5.1/5.2/5.3 local root exploits  View
370771 71709 CVE-2004-1329 701  View
370772 71709 CVE-2004-1329 IY64277  View
370773 71709 CVE-2004-1329 IY64389  View
370774 71709 CVE-2004-1329 20070330 AIX 4.3 lsmcode local root command execution  View
370775 71709 CVE-2004-1329 20070402 Re: AIX 4.3 lsmcode local root command execution  View
370776 71709 CVE-2004-1329 12041  View
370777 71709 CVE-2004-1329 aix-diagnostics-gain-privileges(18620)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63220 JVNDB-2004-000562 IBM AIX の diag コマンドを利用する複数のプログラムに任意のコードを実行される脆弱性 IBM AIX に含まれる diag コマンドが利用する (1) lsmcode、(2) diag_exec、(3) invscout、(4) invscoutd には、$DIAGNOSTICS 環境変数の取り扱いに不備が存在するため、任意のコードを実行される脆弱性が存在します。 CVE-2004-1329 9756 CVE-2004-1329 71709 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000562.html 2004-12-17 2007-04-01 View