VULNERABILITY INTELLIGENCE
CVE-2006-4416
CVSS score7.2 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2006-08-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.