CVE-2006-4416 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-4416
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-4416

Description: Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/29165 ST 1016920 SAID Secunia Advisory: SA21620 Secunia Advisory: SA22106 CONFIRM BID 19708 20197 AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737 http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722 http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699

Return to the previous page.