CVE-2004-2634

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors.

References

http://secunia.com/advisories/11496
http://securitytracker.com/id?1009975
http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only
http://www-1.ibm.com/support/search.wss?rs=0&q=IY55790&apar=only
http://www.osvdb.org/5711
http://www.osvdb.org/5712
http://www.securityfocus.com/bid/10231
https://exchange.xforce.ibmcloud.com/vulnerabilities/16008
https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=279
http://secunia.com/advisories/11496
http://securitytracker.com/id?1009975
http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only

Get alerted when CVE-2004-2634 or the next vulnerability affects your stack