CVE-2006-1246
First published: Fri Mar 17 2006(Updated: )
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM AIX | =5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739
- http://www.securityfocus.com/bid/17115
- http://secunia.com/advisories/19235
- http://www.osvdb.org/23921
- http://securitytracker.com/id?1015786
- http://attrition.org/pipermail/vim/2006-March/000641.html
- http://www.nsfocus.com/english/homepage/research/0602.htm
- http://www.vupen.com/english/advisories/2006/0957
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25299
Frequently Asked Questions
What is the severity of CVE-2006-1246?
CVE-2006-1246 is classified as a medium severity vulnerability.
How do I fix CVE-2006-1246?
To fix CVE-2006-1246, update your IBM AIX system to the latest version that addresses this vulnerability.
What is the impact of CVE-2006-1246?
The impact of CVE-2006-1246 allows local users to execute arbitrary commands due to an untrusted search path in mklvcopy.
Is there a workaround for CVE-2006-1246?
A practical workaround for CVE-2006-1246 is to limit local user access or restrict the execution of the mklvcopy command.
Who is affected by CVE-2006-1246?
Users running IBM AIX 5.3 are affected by CVE-2006-1246.
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/author
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/5.3