CVE-2004-2388

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/11085Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-102.shtmlExploit, Vendor Advisory
http://www.osvdb.org/4248Patch
http://www.securityfocus.com/bid/9835Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15455
http://secunia.com/advisories/11085Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-102.shtmlExploit, Vendor Advisory
http://www.osvdb.org/4248Patch
http://www.securityfocus.com/bid/9835Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15455

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-23895.0Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denia CVE-2004-23905.0The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and la CVE-2004-23915.0Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message wi CVE-2004-23925.0libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failure CVE-2004-23937.5Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allo CVE-2004-23942.1Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password inste CVE-2004-23952.1Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts f CVE-2004-23967.2passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe an CVE-2004-23977.5The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the k CVE-2004-23982.1Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid CVE-2004-23995.0Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed respo CVE-2004-24002.1WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access t