CVE-2006-1246

high

Description

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25849

https://exchange.xforce.ibmcloud.com/vulnerabilities/25299

http://www.vupen.com/english/advisories/2006/0957

http://www.securityfocus.com/bid/17115

http://www.osvdb.org/23921

http://www.nsfocus.com/english/homepage/research/0602.htm

http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739

http://securitytracker.com/id?1015786

http://secunia.com/advisories/19235

http://attrition.org/pipermail/vim/2006-March/000641.html

Details

Source: Mitre, NVD

Published: 2006-03-17

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H