CVE-2006-1246
UnknownEPSS 0.45%
Last modified
CVE-2006-1246 is a vulnerability of currently unknown severity. Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aix | 5.3 |
References
- http://secunia.com/advisories/19235Patch, Vendor Advisory
- http://www.nsfocus.com/english/homepage/research/0602.htmPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0957Vendor Advisory
- http://secunia.com/advisories/19235Patch, Vendor Advisory
- http://www.nsfocus.com/english/homepage/research/0602.htmPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0957Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1246?
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
How severe is CVE-2006-1246?
Severity scoring for CVE-2006-1246 is pending analysis. The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.
How do I fix CVE-2006-1246?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-1240Buffer overflow in inet_server.cpp in (1) fb_inet_server and…
- CVE-2006-1241Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, …
- CVE-2006-1242The ip_push_pending_frames function in Linux 2.4.x and 2.6.x…
- CVE-2006-1243Directory traversal vulnerability in install05.php in Simple…
- CVE-2006-1244Unspecified vulnerability in certain versions of xpdf after …
- CVE-2006-1245Buffer overflow in mshtml.dll in Microsoft Internet Explorer…
- CVE-2006-1247rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.…
- CVE-2006-1248Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.…
- CVE-2006-1249Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 a…
- CVE-2006-1250Unspecified vulnerability in the Webmail module in Winmail b…
- CVE-2006-1251Argument injection vulnerability in greylistclean.cron in sa…
- CVE-2006-1252Eval injection vulnerability in cal.php in Light Weight Cale…
Are you affected by CVE-2006-1246?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
