CVE

Id
21114  
CVE No.
CVE-2006-5010  
Status
Candidate  
Description
Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.  
Phase
Assigned (20060926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
200417 21114 CVE-2006-5010 CONFIRM:ftp://aix.software.ibm.com/aix/efixes/security/README  View
200418 21114 CVE-2006-5010 AIXAPAR:IY88681  View
200419 21114 CVE-2006-5010 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IY88681  View
200420 21114 CVE-2006-5010 VUPEN:ADV-2006-3770  View
200421 21114 CVE-2006-5010 URL:http://www.vupen.com/english/advisories/2006/3770  View
200422 21114 CVE-2006-5010 VUPEN:ADV-2006-3871  View
200423 21114 CVE-2006-5010 URL:http://www.vupen.com/english/advisories/2006/3871  View
200424 21114 CVE-2006-5010 SECTRACK:1016965  View
200425 21114 CVE-2006-5010 URL:http://securitytracker.com/id?1016965  View
200426 21114 CVE-2006-5010 SECUNIA:22213  View
200427 21114 CVE-2006-5010 URL:http://secunia.com/advisories/22213  View
200428 21114 CVE-2006-5010 XF:aix-acctctl-command-execution(29163)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58388 JVNDB-2006-000584 Sun Solaris の syslog() 関数におけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris の syslog() 関数には、権限のないユーザにより syslog() 関数を無効にすることが可能である不備が存在するため、システムログが書き込めなくなる脆弱性が存在します。 CVE-2006-5012 21114 6.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000584.html  View