HIGH
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program
Published Aug 28, 2006
7.2
HIGHCVSS 2.0
EPSS 0.41%
Description
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (12)
- ftp://aix.software.ibm.com/aix/efixes/security/README x_refsource_CONFIRM
- http://secunia.com/advisories/21620 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22106 third-party-advisoryx_refsource_SECUNIA
- http://securitytracker.com/id?1016920 vdb-entryx_refsource_SECTRACK
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699 vendor-advisoryx_refsource_AIXAPAR
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722 vendor-advisoryx_refsource_AIXAPAR
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737 vendor-advisoryx_refsource_AIXAPAR
- http://www.securityfocus.com/bid/19708 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/20197 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2006/3389 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/3770 vdb-entryx_refsource_VUPEN
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29165 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| ftp://aix.software.ibm.com/aix/efixes/security/README | x_refsource_CONFIRM | |
| http://secunia.com/advisories/21620 | third-party-advisoryx_refsource_SECUNIA | |
| http://secunia.com/advisories/22106 | third-party-advisoryx_refsource_SECUNIA | |
| http://securitytracker.com/id?1016920 | vdb-entryx_refsource_SECTRACK | |
| http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699 | vendor-advisoryx_refsource_AIXAPAR | |
| http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722 | vendor-advisoryx_refsource_AIXAPAR | |
| http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737 | vendor-advisoryx_refsource_AIXAPAR | |
| http://www.securityfocus.com/bid/19708 | vdb-entryx_refsource_BID | |
| http://www.securityfocus.com/bid/20197 | vdb-entryx_refsource_BID | |
| http://www.vupen.com/english/advisories/2006/3389 | vdb-entryx_refsource_VUPEN | |
| http://www.vupen.com/english/advisories/2006/3770 | vdb-entryx_refsource_VUPEN | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/29165 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 28, 2006
Updated Aug 7, 2024
Reserved Aug 28, 2006
Link CVE-2006-4416
CISA Vulnrichment
Updated n/a