QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0828

Back to search

CVE-2004-0828

Published: Sep 28, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.

VendorProductVersions

n/a

n/a

affected
n/a

References

1011429
vdb-entry
x_refsource_SECTRACK
ctstrtcasd-file-overwrite(17514)
vdb-entry
x_refsource_XF
11264
vdb-entry
x_refsource_BID
12664
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now