Unscored severity · published May 30, 2006
CVE-2006-2647
Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.1; 5.2; 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2647
secunia.com
http://secunia.com/advisories/20325
Patch
http://securitytracker.com/id?1016166
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only
www.securityfocus.com
http://www.securityfocus.com/bid/18114
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS