CVE-2004-1028: Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to ex...

Security readout for executives and security teams

CVE-2004-1028 is a local privilege-escalation issue in IBM AIX chcod. A user already logged into an affected AIX host could influence what helper program chcod runs by changing PATH, potentially causing their own program to run instead. Exposure is most relevant to legacy IBM AIX 5.1.0, 5.2.0, and 5.3.0 systems where local users can execute chcod. Internet-facing exposure is not indicated; the prerequisite is local access. Prioritize if legacy AIX systems remain in production with multiple local users or shared administrative access. This is not a remote internet threat, but it can undermine host trust once an attacker has local access. Mitigation focus: Identify any remaining AIX 5.1.0, 5.2.0, or 5.3.0 hosts.; Review IBM APAR guidance IY64354, IY64355, and IY64356.; Apply the relevant IBM fix or maintenance update where available..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.