CVE-2004-2388: rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which m...

Security readout for executives and security teams

This issue affects rexecd on IBM AIX 4.3.3. A programming mistake can cause the service to assign privileges to the wrong user after authentication. The available bundle does not provide severity scoring, exploit details, or confirmed active exploitation. Likely exposure is limited to systems running AIX 4.3.3 with rexecd present or enabled. Organizations without legacy AIX or rexecd should have little direct exposure based on the provided sources. Handle as a targeted legacy-infrastructure review, not a broad emergency. Priority rises if AIX 4.3.3 systems are still reachable or rexecd supports business-critical workflows. Mitigation focus: Review IBM APAR IY53507 for vendor-provided remediation guidance.; Check CIAC and Secunia advisories for operational guidance and affected context.; Inventory AIX 4.3.3 systems and identify rexecd usage..

Prepared

Jun 29, 2026, 18:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.