Vulnerability in IBM Aix

CVE-2006-2647

Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 5.1, 5.2, 5.3
  • N/a — versions n/a

References