Unscored severity · published Jan 10, 2005
CVE-2004-1054
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to…
–
CVSS
1%
EPSS
No
On KEV
Description
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1054
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1054
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64820&apar=only
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64852&apar=only
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64976&apar=only
Vendor Advisory
http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18619
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS