CVE-2006-2647

Published: May 30, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.

Affected (3)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.1
Ibm Aix	Version 5.2
Ibm Aix	Version 5.3

References (14)

http://secunia.com/advisories/20325

Source: cve@mitre.org

http://securitytracker.com/id?1016166

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/18114

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2007

Source: cve@mitre.org

http://secunia.com/advisories/20325