PT-2006-3569 · Ibm · Ibm Aix

Published 2006-05-30 · Updated 2011-03-08 · CVE-2006-2647

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.1 through 5.3

Description The issue concerns an untrusted search path vulnerability in the update flash component for IBM AIX. This vulnerability allows local users to execute arbitrary commands, potentially involving the lsmcode command and possibly other commands, via unknown vectors.

Recommendations For IBM AIX versions 5.1 through 5.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2647

Affected Products

Ibm Aix

References · 8

• http://securitytracker.com/id?1016166 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2647 · Security Note
• http://securityfocus.com/bid/18114 · Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only · Patch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only · Patch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only · Patch, Vendor Advisory
• http://vupen.com/english/advisories/2006/2007 · Note
• http://secunia.com/advisories/20325 · Note