CVE-2004-1054: IBM Aix

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.

Affected products

• IBM Aix: version 5.1 only; version 5.1l only; version 5.2 only; version 5.2.2 only; version 5.2_l only; version 5.3 only; …

Published 2005-01-10. Last modified 2026-06-16.