CVE-2004-1329

Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.

• http://marc.info/?l=bugtraq&m=110355931920123&w=2
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=onlyPatch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=onlyPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/464276/100/0/threaded
• http://www.securityfocus.com/archive/1/464481/100/0/threaded
• http://www.securityfocus.com/bid/12041Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18620
• https://www.exploit-db.com/exploits/701
• http://marc.info/?l=bugtraq&m=110355931920123&w=2
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=onlyPatch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=onlyPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/464276/100/0/threaded
• http://www.securityfocus.com/archive/1/464481/100/0/threaded
• http://www.securityfocus.com/bid/12041Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18620
• https://www.exploit-db.com/exploits/701

Published

Dec 20, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1323Multiple syscalls in the compat subsystem for NetBSD before …
• CVE-2004-1324The Microsoft Windows Media Player 9.0 ActiveX control may a…
• CVE-2004-1325The getItemInfoByAtom function in the ActiveX control for Mi…
• CVE-2004-1326Buffer overflow in dxterm in Ultrix 4.5 allows local users t…
• CVE-2004-1327Buffer overflow in Crystal FTP Client 2.8 allows remote mali…
• CVE-2004-1328Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, a…
• CVE-2004-1330Buffer overflow in paginit in AIX 5.1 through 5.3 allows loc…
• CVE-2004-1331The execCommand method in Microsoft Internet Explorer 6.0 SP…
• CVE-2004-1332Stack-based buffer overflow in the FTP daemon in HP-UX 11.11…
• CVE-2004-1333Integer overflow in the vc_resize function in the Linux kern…
• CVE-2004-1334Integer overflow in the ip_options_get function in the Linux…
• CVE-2004-1335Memory leak in the ip_options_get function in the Linux kern…