← Database

CVE-2004-2388

CRITICAL CVSS: 10.0 Published: 2004-12-31 Modified: 2026-06-16

Description

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.

Affected Platforms

Ibm Aix

Weakness Type

NVD-CWE-Other

References