CVEvulnerability

CVE-2004-0828

2.1 LOW Published 2004-11-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-11-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.

Affected configurations

• ibm aix 5.2 • ibm aix 5.3

Related

Referenced by CWE · observed example (1)

  • CWE-271 Privilege Dropping / Lowering Errors weakness

References