CVEvulnerability

CVE-2006-4416

7.2 HIGH Published 2006-08-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

Affected configurations

• ibm aix 5.1 • ibm aix 5.2 • ibm aix 5.3

References