CVE-2004-1028

high

Description

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18625

http://www.idefense.com/application/poi/display?id=170&type=vulnerabilities

http://www-1.ibm.com/support/search.wss?rs=0&q=IY64356&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY64354&apar=only

Details

Source: Mitre, NVD

Published: 2005-01-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H