Unscored severity · published Dec 31, 2004
CVE-2004-2388
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function…
–
CVSS
2.1%
EPSS
No
On KEV
Description
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
4.3.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2388
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2388
Patch
http://secunia.com/advisories/11085
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507
Exploit
http://www.ciac.org/ciac/bulletins/o-102.shtml
Patch
http://www.osvdb.org/4248
Patch
http://www.securityfocus.com/bid/9835
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15455
More from Aix
10.0
CVE-2024-56346
IBM AIX command execution
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS