PT-2006-5748 · Ibm · Ibm Aix

Published 2006-09-27 · Updated 2017-07-20 · CVE-2006-5007

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2.0 through 5.3.0

Description The issue concerns an untrusted search path vulnerability in the uucp component, allowing local users to gain privileges through a Trojan horse program involving uux.

Recommendations For IBM AIX versions 5.2.0 through 5.3.0, consider restricting access to the uux functionality until a fix is available. As a temporary workaround, avoid using the uux command in sensitive environments to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-5007

Affected Products

Ibm Aix

References · 9

• http://secunia.com/advisories/22105 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY88565 · Vendor Advisory
• http://securityfocus.com/bid/20196 · Patch
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY88614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5007 · Security Note
• http://securitytracker.com/id?1016921 · Note
• http://vupen.com/english/advisories/2006/3770 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29156 · Note
• ftp://aix.software.ibm.com/aix/efixes/security/README · Note