Description
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
References
- 1015786 vdb-entry
- ADV-2006-0957 vdb-entry
- 17115 vdb-entry
- aix-mklvcopy-code-execution(25849) vdb-entry
- 23921 vdb-entry
- aix-bosrtelvm-gain-privileges(25299) vdb-entry
- IY82739 vendor-advisory
- 20060323 IBM changing significant details? mailing-list
- 19235 third-party-advisory
- http://www.nsfocus.com/english/homepage/research/0602.htm