CVE-2004-1028: IBM Aix

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

Affected products

• IBM Aix: version 5.1 only; version 5.1l only; version 5.2 only; version 5.2.2 only; version 5.2_l only; version 5.3 only; …

Published 2005-01-10. Last modified 2026-06-16.