Unscored CVE-2006-4416 EUVD-2006-4404GHSA-9h92-hjv2-cj7q

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path …

Published Aug 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

References

22106 third-party-advisory
aix-mkvg-privilege-escalation(29165) vdb-entry
1016920 vdb-entry
20197 vdb-entry
ADV-2006-3389 vdb-entry
IY88737 vendor-advisory
21620 third-party-advisory
IY88722 vendor-advisory
19708 vdb-entry
IY88699 vendor-advisory
ADV-2006-3770 vdb-entry