Lucene search

MitreCVE-2006-5011

HistorySep 27, 2006 - 1:07 a.m.

CVE-2006-5011

2006-09-2701:07:00

mitre

web.nvd.nist.gov

ibm aix

vulnerability

untrusted search path

snappd

cve-2006-5011

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

Percentile

9.8%

JSON

Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the “system subroutine”.

Affected configurations

Nvd

Node

ibmaixMatch5.2.0

ibmaixMatch5.3.0

VendorProductVersionCPE
ibmaix5.2.0cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*
ibmaix5.3.0cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	aix	5.2.0	cpe:2.3:o:ibm:aix:5.2.0:::::::*
ibm	aix	5.3.0	cpe:2.3:o:ibm:aix:5.3.0:::::::*

References

ftp://aix.software.ibm.com/aix/efixes/security/README

secunia.com/advisories/22108

securitytracker.com/id?1016919

www-1.ibm.com/support/docview.wss?uid=isg1IY88818

www-1.ibm.com/support/docview.wss?uid=isg1IY88820

www.securityfocus.com/bid/20193

www.vupen.com/english/advisories/2006/3770

exchange.xforce.ibmcloud.com/vulnerabilities/29157

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

Percentile

9.8%

JSON

Related for CVE-2006-5011