Description
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18625
Vendor Advisory third-party-advisory
x_refsource_idefense
http://www.idefense.com/application/poi/display?id=170&type=vulnerabilities
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64356&apar=only
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=IY64354&apar=only
Scores
EPSS
0.0045
EPSS Percentile
36.8%
Details
Status
published
Products (7)
ibm/aix
5.1
ibm/aix
5.1l
ibm/aix
5.2
ibm/aix
5.2.2
ibm/aix
5.2_l
ibm/aix
5.3
ibm/aix
5.3_l
Published
Jan 10, 2005
Tracked Since
Feb 18, 2026