
CVE-2006-4416
https://notcve.org/view.php?id=CVE-2006-4416
28 Aug 2006 — Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program. Vulnerabilidad de ruta de búsqueda no confiable en el comando mkvg en IBM AIX 5.2 y 5.3 permite a usuarios locales escalar privilegios modificando la ruta para apuntar a programas (1) chdev, (2) mkboot, (3) varyonvg, o (4) varyoffvg maliciosos. • ftp://aix.software.ibm.com/aix/efixes/security/README •

CVE-2006-4254 – IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2006-4254
21 Aug 2006 — Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors. Vulnerabilidad no especificada en setlocale en IBM AIX 5.1.0 hasta 5.3.0 permite a usuarios locales escalar privilegios a través de vectores no especificados. • https://www.exploit-db.com/exploits/4612 •

CVE-2006-2647
https://notcve.org/view.php?id=CVE-2006-2647
30 May 2006 — Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands. • http://secunia.com/advisories/20325 •

CVE-2006-1247
https://notcve.org/view.php?id=CVE-2006-1247
19 Apr 2006 — rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. • http://secunia.com/advisories/19656 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVE-2006-1246
https://notcve.org/view.php?id=CVE-2006-1246
17 Mar 2006 — Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability. • http://attrition.org/pipermail/vim/2006-March/000641.html •

CVE-2006-0667
https://notcve.org/view.php?id=CVE-2006-0667
10 Mar 2006 — lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. • http://securitytracker.com/id?1015622 •

CVE-2006-0666
https://notcve.org/view.php?id=CVE-2006-0666
15 Feb 2006 — Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash) via unknown vectors related to EMULATE_VMX. • http://secunia.com/advisories/18795 •

CVE-2006-0674
https://notcve.org/view.php?id=CVE-2006-0674
13 Feb 2006 — Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument. • http://secunia.com/advisories/18773 •

CVE-2005-4271
https://notcve.org/view.php?id=CVE-2005-4271
15 Dec 2005 — Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code. • http://secunia.com/advisories/18088 •

CVE-2005-4272
https://notcve.org/view.php?id=CVE-2005-4272
15 Dec 2005 — Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal. • http://secunia.com/advisories/18088 •