CVE-2004-0828

published 2004-11-03

CVE-2004-0828: The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local…

low 2.1 CVSS 3.1

AV L AC L Au N C N I P A N

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	aix	—	—
ibm	aix	—	—

CWE-271