Vulnerabilities > CVE-2006-4416 - Unspecified vulnerability in IBM AIX 5.1/5.2/5.3
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN ibm
nessus
Summary
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.
Nessus
NASL family AIX Local Security Checks NASL id AIX_U808257.NASL description The remote host is missing AIX PTF U808257, which is related to the security of the package bos.rte.lvm. last seen 2020-06-01 modified 2020-06-02 plugin id 65304 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65304 title AIX 5.2 TL 9 / 5.2 TL 10 : bos.rte.lvm (U808257) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U808257. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65304); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2006-4416"); script_name(english:"AIX 5.2 TL 9 / 5.2 TL 10 : bos.rte.lvm (U808257)"); script_summary(english:"Check for PTF U808257"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U808257, which is related to the security of the package bos.rte.lvm." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY88722" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.2"); script_set_attribute(attribute:"vuln_publication_date", value:"2006/08/23"); script_set_attribute(attribute:"patch_publication_date", value:"2006/08/23"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"520009", patch:"U808257", package:"bos.rte.lvm.5.2.0.96") < 0 ) flag++; if ( aix_check_patch(ml:"520010", patch:"U808257", package:"bos.rte.lvm.5.2.0.96") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family AIX Local Security Checks NASL id AIX_U809463.NASL description The remote host is missing AIX PTF U809463, which is related to the security of the package bos.rte.lvm. last seen 2020-06-01 modified 2020-06-02 plugin id 65308 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65308 title AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.lvm (U809463) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U809463. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65308); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2006-4416"); script_name(english:"AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.lvm (U809463)"); script_summary(english:"Check for PTF U809463"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U809463, which is related to the security of the package bos.rte.lvm." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY88699" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.3"); script_set_attribute(attribute:"vuln_publication_date", value:"2006/08/22"); script_set_attribute(attribute:"patch_publication_date", value:"2006/08/22"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"530005", patch:"U809463", package:"bos.rte.lvm.5.3.0.52") < 0 ) flag++; if ( aix_check_patch(ml:"530006", patch:"U809463", package:"bos.rte.lvm.5.3.0.52") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
References
- ftp://aix.software.ibm.com/aix/efixes/security/README
- ftp://aix.software.ibm.com/aix/efixes/security/README
- http://secunia.com/advisories/21620
- http://secunia.com/advisories/21620
- http://secunia.com/advisories/22106
- http://secunia.com/advisories/22106
- http://securitytracker.com/id?1016920
- http://securitytracker.com/id?1016920
- http://www.securityfocus.com/bid/19708
- http://www.securityfocus.com/bid/19708
- http://www.securityfocus.com/bid/20197
- http://www.securityfocus.com/bid/20197
- http://www.vupen.com/english/advisories/2006/3389
- http://www.vupen.com/english/advisories/2006/3389
- http://www.vupen.com/english/advisories/2006/3770
- http://www.vupen.com/english/advisories/2006/3770
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29165
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29165