Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

IBM AIX mkvg command can be tricked to run malicious programs

CVE-2006-4416 · published 20 years ago
Summary

The mkvg utility in IBM AIX versions 5.2 and 5.3 looks for helper programs in the system path without verifying their location. A local user who can place a fake version of those helpers (such as chdev, mkboot, varyonvg or varyoffvg) could cause mkvg to run the malicious code with higher privileges. To protect your systems, ensure that only trusted users can write to directories in the executable search path and consider restricting or monitoring write access to those locations.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm aix 5.1
5.2
5.3
cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
Original advisory text
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonv...
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published28 Aug 2006
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-4416 · NVD
Track software like this
Free during beta