CVE-2004-1054

AIX 4.3/5.1 < 5.3 - 'lsmcode' Execution Privilege Escalation

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.

Vulnerabilidad de camino de ejecución no confiable en invscout de IBM AIX 5.1.0, 5.2.0 y 5.3.0 permite a usuarios locales ganar privilegios modificando la variable de entorno PATH para que apunte a un programa "uname" malicioso, que es ejecutado desde lsvpd después de que lsvpd haya sido ejecutado por invscout

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-11-18 CVE Reserved
2004-12-21 First Exploit
2004-12-22 CVE Published
2023-03-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (7)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/18619	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/701	2004-12-21
https://www.exploit-db.com/exploits/898	2005-03-25

URL	Date	SRC

URL	Date	SRC
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64820&apar=only	2017-07-11
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64852&apar=only	2017-07-11
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64976&apar=only	2017-07-11
http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities	2017-07-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.1 Search vendor "Ibm" for product "Aix" and version "5.1"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.1l Search vendor "Ibm" for product "Aix" and version "5.1l"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.2 Search vendor "Ibm" for product "Aix" and version "5.2"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.2.2 Search vendor "Ibm" for product "Aix" and version "5.2.2"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.2_l Search vendor "Ibm" for product "Aix" and version "5.2_l"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.3 Search vendor "Ibm" for product "Aix" and version "5.3"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.3_l Search vendor "Ibm" for product "Aix" and version "5.3_l"		-		Affected