NVD

Id
63051  
Name
CVE-2006-4416  
Description
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-08-28  
Modified Date
2011-03-07  
Seq
2006-4416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328339 63051 CVE-2006-4416 ftp://aix.software.ibm.com/aix/efixes/security/README  View
328340 63051 CVE-2006-4416 1016920  View
328341 63051 CVE-2006-4416 IY88699  View
328342 63051 CVE-2006-4416 IY88722  View
328343 63051 CVE-2006-4416 IY88737  View
328344 63051 CVE-2006-4416 19708  View
328345 63051 CVE-2006-4416 20197  View
328346 63051 CVE-2006-4416 ADV-2006-3389  View
328347 63051 CVE-2006-4416 ADV-2006-3770  View
328348 63051 CVE-2006-4416 aix-mkvg-privilege-escalation(29165)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58328 JVNDB-2006-000524 IBM AIX の mkvg コマンドにおける任意のコードを実行される脆弱性 IBM AIX の mkvg コマンドには、chdev, mkboot, varyonvg, varyoffvg 等のプログラムを呼び出す際に、絶対パス名を指定しない脆弱性が存在します。 CVE-2006-4416 20518 CVE-2006-4416 63051 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000524.html 2006-08-23 2007-04-01 View