VYPR
Unrated severityNVD Advisory· Published Dec 20, 2004· Updated Jun 16, 2026

CVE-2004-1329

CVE-2004-1329

Description

Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Aix8 versions
    cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*
    • (no CPE)range: 5.1 through 5.3

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.