IBM AIX Mkvg Local Insecure Program Execution Vulnerability

Bugtraq ID:	19708
Class:	Design Error
CVE:	CVE-2006-4416
Remote:	No
Local:	Yes
Published:	Aug 25 2006 12:00AM
Updated:	Jun 26 2007 11:58PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX Mkvg Local Insecure Program Execution Vulnerability

IBM AIX is prone to a vulnerability that allows programs to execute in an insecure manner.

A local attacker may be able to exploit this issue to gain elevated privileges on the affected system. This may lead to other attacks.

IBM AIX 5.1, 5.2, and 5.3 are vulnerable to this issue.

IBM AIX Mkvg Local Insecure Program Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

IBM AIX Mkvg Local Insecure Program Execution Vulnerability

Solution:
IBM has released an update to address this issue. Please see the references for more information.


IBM AIX 5.2

• IBM IY88722
  http://www-912.ibm.com/eserver/support/fixes/fcgui.jsp?whichFix=APAR&f ixes=IY88722

IBM AIX Mkvg Local Insecure Program Execution Vulnerability

References:

• AIX Homepage (IBM)
  
• IY88699: POTENTIAL SECURITY ISSUE IN BOS.RTE.LVM (IBM)
  
• IY88722: POTENTIAL SECURITY ISSUE IN BOS.RTE.LVM (IBM)
  
• IY88737: POTENTIAL SECURITY ISSUE IN BOS.RTE.LVM (IBM)