CVE-2006-1246

IBM AIX 5.3 - Local Command Execution via mklvcopy Untrusted Search Path

Title source: manual

Description

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.

References (10)

Core 10

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015786

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/0957

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17115

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25849

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/23921

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25299

Various Sources vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739

Various Sources mailing-list x_refsource_vim

http://attrition.org/pipermail/vim/2006-March/000641.html

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19235

Patch, Vendor Advisory x_refsource_misc

http://www.nsfocus.com/english/homepage/research/0602.htm

Scores

EPSS 0.0045

EPSS Percentile 36.6%

Details

Status published

Products (1)

ibm/aix 5.3

Published Mar 17, 2006

Tracked Since Feb 18, 2026