rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2005-08-16T04:00:00
Updated: 2024-08-08T01:22:13.940Z
Reserved: 2005-08-16T00:00:00
Link: CVE-2004-2388

No data.

Status : Modified
Published: 2004-12-31T05:00:00.000
Modified: 2024-11-20T23:53:14.003
Link: CVE-2004-2388

No data.