Description
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1011429
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17514
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/11264
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/12664/
Scores
EPSS
0.0034
EPSS Percentile
26.8%
Details
Status
published
Products (2)
ibm/aix
5.2
ibm/aix
5.3
Published
Nov 03, 2004
Tracked Since
Feb 18, 2026