CVE-2006-2647: High severity ibm aix vulnerability
Published May 30, 2006
·Updated
Untrusted search path vulnerability in updateflash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.
Affected Software
3 affected components
IBM AIX=5.3
IBM AIX=5.2
IBM AIX=5.1
Remediation
Patch Available
Event History
May 30, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2647?
CVE-2006-2647 is considered a medium to high severity vulnerability due to potential arbitrary command execution by local users.
2
How do I fix CVE-2006-2647?
To fix CVE-2006-2647, ensure that you apply the latest patches provided by IBM for AIX versions 5.1, 5.2, and 5.3.
3
Who is affected by CVE-2006-2647?
CVE-2006-2647 affects local users of IBM AIX 5.1, 5.2, and 5.3 installations.
4
What kind of attack does CVE-2006-2647 allow?
CVE-2006-2647 allows local users to execute arbitrary commands, potentially compromising the system.
5
Is CVE-2006-2647 still a risk today?
Although it is an older vulnerability, systems still running affected versions of AIX without patches may be at risk.