CVE-2006-4416

Published: Aug 28, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

Affected (3)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.1
Ibm Aix	Version 5.2
Ibm Aix	Version 5.3

References (24)

ftp://aix.software.ibm.com/aix/efixes/security/README (unsafe URL)

Source: cve@mitre.org

http://secunia.com/advisories/21620

Source: cve@mitre.org

http://secunia.com/advisories/22106

Source: cve@mitre.org

http://securitytracker.com/id?1016920

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737

Source: cve@mitre.org

http://www.securityfocus.com/bid/19708

Source: cve@mitre.org

http://www.securityfocus.com/bid/20197

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3389

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3770

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29165

Source: cve@mitre.org

ftp://aix.software.ibm.com/aix/efixes/security/README (unsafe URL)